Job description

Governance, Risk & Compliance (GRC) Analyst | Information Security | Phoenix AZ Hybrid | Arizona State Agency | Contract to Hire Location: Phoenix AZ — Hybrid | Must be within 1 hour drive of Phoenix Pay Rate: $46.51/hr W2 Duration: 4 months — contract to hire Deadline: June 22, 2026 at 3pm About the Role: SunSoftOnline is seeking a GRC (Governance, Risk & Compliance) Analyst to join their Information Security team. You will perform risk assessments, conduct audit reviews, develop POA&Ms, and work cross-functionally with business units to strengthen the agency's security posture. Responsibilities: • Perform risk assessments and audit reviews; generate findings reports and track outcomes • Review and manage security audit plans, security plans, and risk documentation • Investigate suspicious network activity and generate incident reports • Prepare audit documentation and draft findings per agency writing standards • Research IT security standards, laws, and regulations to ensure compliance Requirements Required : • NIST 800-53 R5 — must have • Risk Management Framework (RMF) — must have • Windows/Unix experience • Bachelor's degree • Local to Phoenix AZ metro (within 1 hour drive) — city and state must be on resume • Eligible for FTE conversion — no visa sponsorship • Available for in-person interview within 1 week of June 22 Preferred : • CISSP, CCSP, GSTRT, GSNA, or CAP certification • Project management experience • Knowledge of IRS Pub1075, HIPAA/HITRUST, CJIS, MARS-E frameworks

Requirements

Must-haves

Governance, Risk & Compliance (GRC) Analyst | Information Security | Phoenix AZ Hybrid | Arizona State Agency | Contract to Hire
Location: Phoenix AZ — Hybrid | Must be within 1 hour drive of Phoenix
Pay Rate: $46.51/hr W2
Duration: 4 months — contract to hire
Deadline: June 22, 2026 at 3pm
Perform risk assessments and audit reviews; generate findings reports and track outcomes
Review and manage security audit plans, security plans, and risk documentation
Investigate suspicious network activity and generate incident reports
Prepare audit documentation and draft findings per agency writing standards
Research IT security standards, laws, and regulations to ensure compliance
NIST 800-53 R5 — must have
Risk Management Framework (RMF) — must have
Windows/Unix experience
Bachelor's degree
Local to Phoenix AZ metro (within 1 hour drive) — city and state must be on resume
Eligible for FTE conversion — no visa sponsorship
Available for in-person interview within 1 week of June 22

Nice-to-haves

CISSP, CCSP, GSTRT, GSNA, or CAP certification
Project management experience
Knowledge of IRS Pub1075, HIPAA/HITRUST, CJIS, MARS-E frameworks

Application prep

Use the role’s language and application details while tailoring your materials.

Platform: zoho-recruit
Effort: medium