Information Security Analyst

Job Title: Information Security Analyst

Location: Phoenix, AZ
Experience: 3 5 Years

Job Description:

We are seeking a proactive and detail-oriented Information Security Analyst to support our enterprise security programs by implementing, monitoring, and enforcing compliance with information security policies and procedures. This role involves documentation, reporting, control assessments, and analysis to strengthen security governance and risk management. The ideal candidate will have a solid understanding of information security standards and be capable of working cross-functionally to uphold security best practices.

Key Responsibilities:

• Support the development, implementation, and compliance monitoring of internal information security policies, standards, and procedures.

• Enforce security policies by managing and monitoring access profiles, reviewing violation reports, and investigating security exceptions.

• Assist in documenting controls and producing detailed reports, presentations, and data visualizations for decision-making.

• Utilize security tools and standardized processes to ensure consistency and efficiency across information security operations.

• Generate and maintain regular status reports to monitor progress on projects, compliance initiatives, and security incidents.

• Provide consultation on security controls, business processes, and operational procedures.

• Facilitate meetings to gather and document changes to products, services, or operational processes.

• Maintain a comprehensive internal documentation repository to reflect current workflows and compliance requirements.

• Contribute to root cause analysis for security incidents and post-implementation reviews.

• Support issue tracking, project risk assessments, and remediation planning.

• Assist in evaluating tools, technologies, and procedures that enhance overall security posture and operational productivity.

• Analyze trends and support the creation of action plans to mitigate risks and enhance information security performance.

• Maintain detailed records to enable historical analysis and trend identification.

Required Skills & Qualifications:

• 3 5 years of experience in information security, IT risk, or compliance roles.

• Familiarity with enterprise security policies, standards, frameworks (e.g., ISO 27001, NIST), and compliance requirements.

• Strong analytical and documentation skills, with experience using Excel, PowerPoint, and reporting tools.

• Excellent communication and interpersonal skills to collaborate with both technical and non-technical stakeholders.

• Attention to detail and the ability to manage multiple tasks simultaneously.

• Experience with incident tracking, root cause analysis, and process improvement methodologies.

• Knowledge of access control principles, user profile management, and risk mitigation strategies.

Preferred Qualifications:

• Experience with security compliance tools, GRC platforms, or auditing frameworks.

• Relevant certifications such as Security+, CISSP, CISA, or ISO 27001 Lead Auditor.

• Exposure to cloud security environments and regulatory compliance (e.g., SOX, PCI-DSS, HIPAA).