9 information security risk analyst jobs at 7 companies in Phoenix, AZ
5d
Save
Mark Applied
Hide
IAM Governance Analyst - Senior Information Security Analyst
Charlotte or Chandler or West Des Moines or Columbus
$100k-$163k/yr HybridFull Time
4+ YOERequires 4+ years in information security, risk, controls, quality assurance, operations, compliance, or process work and foundational IAM tools and processes knowledge.
IAM, Agile
2mo
Save
Mark Applied
Hide
Senior Insider Risk & AI Security Analyst/ Engineer IV
Arizona or Tempe or Missouri or St. Louis or United States
HybridFull Time
5+ YOE5+ years in information systems security/IT with security controls; experience monitoring AI/ML platforms and telemetry; familiarity with UEBA, DLP, SIEM/SOAR; ability to investigate alerts, perform digital forensics, and translate AI risks for stakeholders.
Gurucul, XSOAR, Microsoft Purview, Proofpoint, Zscaler, SIEM, SOAR, UEBA, DLP
2w
Save
Mark Applied
Hide
Info Security Analyst
Phoenix, Arizona, United States
$80k-$115k/yr OnsiteFull Time
3+ YOE3+ years experience in cybersecurity with knowledge of SaaS risk, cloud shared responsibility, containerization, identity federation, and industry standards; strong analysis, communication, and documentation skills.
Docker, Kubernetes, SAML, OIDC, IaaS, PaaS, SaaS, FedRamp, NIST, CSA, PCI
1w
Save
Mark Applied
Hide
Senior Insider Risk & AI Security Analyst/ Engineer IV
Tempe or St. Louis
HybridFull Time
5+ YOERequires 5+ years in information security or IT, AI security or governance experience, advanced security certification, UEBA and DLP investigation skills, cloud data protection knowledge, and strong communication abilities.
Gurucul, XSOAR, Microsoft Purview, Proofpoint, Zscaler, SIEM, SOAR, UEBA, DLP
1mo
Save
Mark Applied
Hide
Business Risk Analyst
Alpharetta or Scottsdale
$70k-$98k/yr HybridFull Time
5+ YOE5+ years in information security, risk management, or compliance; working knowledge of SOC 2/PCI DSS/HIPAA/GovRAMP/NIST CSF; TPRM and vendor due diligence experience; strong analytical and communication skills.
SOC 2, PCI DSS, HIPAA, GovRAMP, NIST CSF, TPRM, GRC, AuditBoard, Optro
1mo
Save
Mark Applied
Hide
Senior Cybersecurity Risk Analyst - USA Remote
Washington or Boston or Dallas or Chicago or Miami or Denver or Orange or Los Angeles or Las Vegas or Sacramento or Phoenix or San Diego or United States
$130k-$160k/yr RemoteFull Time
7+ YOE7+ years in third-party/vendor risk, enterprise risk, or vendor security; experience administering vendor questionnaires, reviewing SOC 2/ISO 27001 evidence, scoring at scale, reviewing cybersecurity contract provisions, and operating enterprise risk registers.
Shared Assessments SIG, NIST SP 800-161, ISO/IEC 27036, GDPR, HIPAA, PCI DSS, SOX, SOC 2, ISO 27001, NIST AI RMF, ISO/IEC 42001, OneTrust, ServiceNow IRM, RSA Archer
2w
Save
Mark Applied
Hide
Senior Risk and Vulnerability Analyst
Chandler or Washington
$104k-$166k/yr OnsiteFull Time
8+ YOEBachelor's in Cybersecurity/IT (or 4 years' extra experience), 8+ years in security operations/vulnerability management (reduced with advanced degrees), hands-on ISVM and API scanning experience, automation and compliance familiarity, U.S. citizenship.
ISVM, API scanning
2w
Save
Mark Applied
Hide
Senior Risk and Vulnerability Analyst
Chandler or Washington
$104k-$166k/yr OnsiteFull Time
8+ YOE8+ years in security operations or vulnerability management; Bachelor in Cybersecurity/IT (or 4 years additional experience); hands-on vulnerability scanning, cloud compliance, ISVM, API scanning; Secret clearance and U.S. citizenship required.
ISVM, DHS 4300A, NIST SP 800-115, CISA BOD 23-01
1w
Save
Mark Applied
Hide
Threat Detection & Response AVP, Tier 2 - AZ
Tempe or Jersey City
$112k-$141k/yr HybridFull Time
5+ YOEBachelor's degree or equivalent experience and 5+ years in cybersecurity operations or information security. Requires threat detection, incident response, risk analysis, and security monitoring expertise.
Microsoft Windows, Unix, Linux, macOS, ISO 27001, NIST 800 series, FFIEC, SOC 2, FedRAMP, STAR, MITRE ATT&CK, Cyber Kill Chain, Endpoint Detection and Response, Security Information and Event Management, web application firewall