Information Security Analyst

Information Security Analyst - Build Your GRC Expertise From the Ground Up

Do you thrive in fast-paced environments where you can take ownership and build something amazing? Are you passionate about GRC and ready to learn from the best? If so, this unique opportunity with our client is tailor-made for you.

In this role, you'll have the rare opportunity to build the GRC function from scratch, giving you a comprehensive understanding of the field and the chance to shape its future within the company. You'll work alongside industry experts who will provide mentorship and guidance as you take ownership of your work and make a meaningful impact. If you're eager to learn and grow in a dynamic environment, this is the perfect chance to unleash your potential and become a GRC expert.

Here's what makes this role special:

• Ground-floor opportunity: They're building their security program from scratch, and you'll be a key player in shaping its future. Gain hands-on experience across the GRC spectrum, from risk management and compliance to security awareness and vendor risk.
• Mentorship and growth: Learn from an experienced Sr. Manager who will invest in your career growth and empower you to reach your full potential.
• Dynamic challenges: Jump right in and help them prepare for an upcoming audit. This might be intense, but you'll learn at lightning speed and be surrounded by a supportive team.

Is this you?

• 3-5 years of experience in GRC, ideally across multiple functions (risk, compliance, security awareness, etc.)
• Fast learner with a hunger for knowledge and a proactive approach
• Excellent communication and collaboration skills to work effectively with all levels
• Analytical mind with a passion for problem-solving and attention to detail
• Strong understanding of Information Security principles and compliance frameworks (SOC 1/2, ISO 27001, PCI-DSS)
• One of the following industry certifications: CISA, CISM, CDPSE, CISSP, PCI-PCP, PCI-ISA, or PCI-QSA

Bonus points if you have:

• Experience with GRC tools (Drotta is a plus!)
• Understanding of business risks and how they tie to security initiatives
• Knowledge of data privacy and security regulations
• Experience with Proofpoint, DarkTrace, Upguard

What you'll do:

• Lead the implementation and management of their third-party risk management and security awareness programs
• Support their PCI and SOC 2 compliance efforts
• Assist with gap analysis, risk assessments, and control remediation
• Collaborate with stakeholders to collect and maintain compliance artifacts
• Help select and implement a GRC tool
• And much more!

Citizenship and Location Requirements

• Must be a US Citizen
• Must currently reside in the Scottsdale, AZ area and be willing to travel into the office on a hybrid schedule 2-3 times per week

Salary

• *The targeted salary range for this full-time position is $95k-$101k annually

Benefits

• Medical, dental, and vision insurance
• 401k with a company match of 6%
• Paid holidays
• PTO
• Yearly bonus

Ready to be part of something special? Apply today and join a team that values initiative, growth, and making a real difference in the world of security.

Blackmere is proud to be an Equal Opportunity and Affirmative Action employer. We do not discriminate based on race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.