What are the responsibilities and job description for the Security Advisor / CISA / Onsite in Phoenix position at Motion Recruitment?
One of the leading enterprise technology services organizations is expanding its cybersecurity governance and advisory practice. Their focus is strengthening information security oversight within a highly regulated public sector environment, ensuring risk transparency, audit readiness, and long-term security program maturity.
They are currently seeking a Security Advisor (IT Audit / GRC Focused) to join their growing team. This position will be heavily hands-on, responsible for conducting control gap assessments, mapping technical and operational controls to NIST-aligned frameworks, supporting audit readiness efforts, and maturing governance documentation across infrastructure and application environments. The ideal candidate has a strong IT audit or GRC background with experience translating regulatory and framework requirements into actionable security controls — not just reviewing policies, but actively improving and operationalizing them.
This role does require onsite work 5 days a week in downtown Phoenix.
Required Skills & Experience
Tech Breakdown
They are currently seeking a Security Advisor (IT Audit / GRC Focused) to join their growing team. This position will be heavily hands-on, responsible for conducting control gap assessments, mapping technical and operational controls to NIST-aligned frameworks, supporting audit readiness efforts, and maturing governance documentation across infrastructure and application environments. The ideal candidate has a strong IT audit or GRC background with experience translating regulatory and framework requirements into actionable security controls — not just reviewing policies, but actively improving and operationalizing them.
This role does require onsite work 5 days a week in downtown Phoenix.
Required Skills & Experience
- 4 years of hands-on IT audit, cybersecurity governance, or GRC experience
- CISA certification required
- Strong experience aligning controls to frameworks such as NIST 800-53, NIST CSF, FFIEC, GLBA, ISO 27001, or similar
- Experience performing control gap assessments and documenting remediation plans
- Experience supporting SOX, SOC 2, or regulatory audit readiness activities
- Hands-on experience with risk assessments, risk registers, and RCSA processes
- Strong understanding of IT General Controls (ITGC), access management, change management, and incident response governance
- Experience developing or maturing governance artifacts (IR plans, DR plans, evidence matrices, policies, procedures)
- Ability to communicate risk effectively to both technical and non-technical stakeholders
- Strong documentation and reporting capabilities
- Experience working within regulated environments (banking, utilities, healthcare, or government)
- Exposure to cloud security governance (AWS or Azure)
- Experience partnering with engineering or infrastructure teams to operationalize controls
- Experience participating in modernization or transformation initiatives
- Strong analytical and process improvement mindset
- Ability to operate independently with strong ownership
Tech Breakdown
- 100% Governance, Risk, and Compliance
- 100% Hands On