Information Security Analyst
staffing scienceScottsdale (AZ)
Information Security Analyst
Posted 16 days ago
staffing scienceScottsdale (AZ)
SENIORITY
Senior
About the role
Information Security Analyst Onsite, Greater Phoenix Area (5 days per week) | Full-Time, Direct HireAbout the Opportunity A growing company in the Phoenix metro is adding a compliance-focused security analyst to its information security team. This person will partner closely with senior security leadership and own a broad slice of the company’s governance, risk, compliance, and privacy program. It’s a hands-on, high-ownership seat for someone who likes running their own workload, catching problems early, and getting the details right the first time.
What You’ll Do:
- Manage the company’s payment card compliance program, including evidence gathering and readiness for annual external assessments
- Handle data subject and consumer privacy requests end to end, ensuring responses are accurate, complete, and delivered on time
- Support security incident response, from initial triage through documentation, lessons learned, and follow-up actions
- Track findings from assessments and penetration tests, and drive remediation with owners across IT, infrastructure, and engineering
- Run third-party security risk reviews and ongoing vendor monitoring
- Maintain controls and audit evidence in a compliance automation platform
- Develop and deliver security and privacy awareness training for employees at every level
- Lead GRC initiatives independently, keeping timelines on track and stakeholders informed
- What You BringHands-on experience supporting PCI DSS assessments, ideally in a service provider environment
- Working knowledge of GDPR and CCPA, with direct experience responding to privacy requests
- Experience with a compliance automation platform such as Drata, Vanta, or Secureframe
- Exposure to control frameworks such as CIS Controls, NIST, or SOC 2A track record of influencing technical teams to close remediation items without direct authority
- Experience creating and presenting training content (be ready to share a sample)
- Strong organization and the ability to juggle many small, deadline-driven tasks across projects
Nice to Have:
Familiarity with EDR tooling Exposure to international privacy regulations beyond GDPR and CCPA
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.