Job Description

Senior Information Security Analyst - Governance, Risk, and Compliance

Must be local to Arizona

Must Haves:

• Bachelor's degree in Computer Science, Management Information Systems or equivalent experience
• 5-7 years of experience in IT or IS Governance, Risk, and Compliance.
• Demonstrated experience drafting and maintaining security policies, standards, and procedures.
• Strong knowledge of compliance frameworks (SOC 2, PCI, DSS, HIPAA, ISO 27001 , or similar).
• Ability to communicate complex security concepts to both technical and business audiences.
• Familiarity with AWS security services (IAM, GuardDuty, Config, Security Hub).
• Experience supporting external audits (SOC 2, PCI, HIPAA).
• Certifications such CISA, CISM, CISSP, or AWS Certified Security - Specialty.

What You’ll Be Doing

Your day-to-day will blend writing, analysis, and collaboration. Some days you’ll be refining a policy for executive approval, and other days you’ll be working with engineers to translate technical controls into standards and procedures that auditors can follow.

Policy Development & Documentation

Draft, update, and maintain Information Security policies, standards, and procedures tailored to our AWS multi-tenant environment.

Ensure alignment with compliance frameworks (SOC 2, PCI, HIPAA, ISO 27001).

Partner with engineers and business stakeholders to ensure policies reflect practical, real-world workflows.

Risk & Compliance Oversight

Identify, document, and track security risks across our environment.

Support risk assessments and provide recommendations for risk treatment plans.

Assist in readiness for external audits by ensuring documentation and evidence are organized and up-to-date.

Collaboration & Communication

Work directly with leadership, engineers, and vendors to ensure policies are clear, actionable, and understood.

Translate technical requirements into plain-language standards that can be followed by non-technical teams.

Support training and awareness initiatives to drive adoption of policies.

Continuous Governance

Establish document versioning and review cycles to keep policies evergreen.

Recommend improvements based on lessons learned, new regulations, and evolving business needs.

Track key governance metrics and report progress to leadership.

Job Tags

Similar Jobs