Governance, Risk & Compliance (GRC) Analyst | Information Security | Phoenix AZ Hybrid | Arizona State Agency | Contract to Hire
Location:Phoenix AZ — Hybrid | Must be within 1 hour drive of Phoenix
Pay Rate:$46.51/hr W2
Duration:4 months — contract to hire
Deadline:June 22, 2026 at 3pm
About the Role:
SunSoftOnline is seeking a GRC (Governance, Risk & Compliance) Analyst to join their Information Security team. You will perform risk assessments, conduct audit reviews, develop POA&Ms, and work cross-functionally with business units to strengthen the agency's security posture.
Responsibilities:
- Perform risk assessments and audit reviews; generate findings reports and track outcomes
- Review and manage security audit plans, security plans, and risk documentation
- Investigate suspicious network activity and generate incident reports
- Prepare audit documentation and draft findings per agency writing standards
- Research IT security standards, laws, and regulations to ensure compliance
Requirements
Required:
- NIST 800-53 R5 — must have
- Risk Management Framework (RMF) — must have
- Windows/Unix experience
- Bachelor's degree
- Local to Phoenix AZ metro (within 1 hour drive) — city and state must be on resume
- Eligible for FTE conversion — no visa sponsorship
- Available for in-person interview within 1 week of June 22
Preferred:
- CISSP, CCSP, GSTRT, GSNA, or CAP certification
- Project management experience
- Knowledge of IRS Pub1075, HIPAA/HITRUST, CJIS, MARS-E frameworks
- Locations
- Phoenix, Arizona, United States
- Education
- bachelor degree