Governance, Risk & Compliance (GRC) Analyst | Information Security | Phoenix AZ Hybrid | Arizona State Agency | Contract to Hire

Governance, Risk & Compliance (GRC) Analyst | Information Security | Phoenix AZ Hybrid | Arizona State Agency | Contract to Hire Location: Phoenix AZ — Hybrid | Must be within 1 hour drive of Phoenix Pay Rate: $46.51/hr W2 Duration: 4 months — contract to hire Deadline: June 22, 2026 at 3pm About the Role: Sun. Soft. Online is seeking a GRC (Governance, Risk & Compliance) Analyst to join their Information Security team.

You will perform risk assessments, conduct audit reviews, develop POA&Ms, and work cross-functionally with business units to strengthen the agency's security posture.

Responsibilities

Perform risk assessments and audit reviews; generate findings reports and track outcomes Review and manage security audit plans, security plans, and risk documentation Investigate suspicious network activity and generate incident reports Prepare audit documentation and draft findings per agency writing standards Research IT security standards, laws, and regulations to ensure compliance Requirements Required : NIST 800-53 R5 — must have Risk Management Framework (RMF) — must have Windows/Unix experience Bachelor's degree Local to Phoenix AZ metro (within 1 hour drive) — city and state must be on resume Eligible for FTE conversion — no visa sponsorship Available for in-person interview within 1 week of June 22 Preferred : CISSP, CCSP, GSTRT, GSNA, or CAP certification Project management experience Knowledge of IRS Pub1075, HIPAA/HITRUST, CJIS, MARS-E frameworks