1

Cgrc Jobs in Arizona (NOW HIRING)

Cgrc information

What is a CGRC professional?

CGRC professionals, or Certified in Governance, Risk and Compliance, are experts who help organizations manage risk, ensure regulatory compliance, and establish effective governance frameworks. They analyze processes, identify potential risks, and develop policies to maintain compliance with laws and industry standards. CGRC certification, previously known as CAP (Certified Authorization Professional), is offered by (ISC)² and validates knowledge in governance, risk management, and compliance best practices. These professionals often work in cybersecurity, IT, or regulatory roles across various industries.

What are the key skills and qualifications needed to thrive as a Cybersecurity Governance, Risk, and Compliance (CGRC) professional?

To thrive as a CGRC professional, you need a solid understanding of cybersecurity frameworks, risk management, and regulatory compliance, typically supported by a relevant degree and certifications such as CISSP, CISA, or CGRC (formerly CAP). Familiarity with GRC platforms like Archer, ServiceNow GRC, or RSA, as well as knowledge of NIST, ISO, or HIPAA standards, is commonly required. Strong analytical skills, attention to detail, and effective communication are crucial soft skills for interpreting regulations and collaborating across teams. These competencies ensure organizations remain secure and compliant, minimizing risk and avoiding costly penalties.

What are some common challenges CGRC professionals face when managing compliance across multiple frameworks?

CGRC (Cybersecurity Governance, Risk, and Compliance) professionals often encounter the challenge of aligning organizational policies with the requirements of various regulatory frameworks, such as NIST, ISO 27001, and GDPR. This can involve interpreting overlapping or conflicting controls and ensuring consistent documentation and reporting. Additionally, they must facilitate communication and collaboration between IT, legal, and business teams to ensure all stakeholders understand and meet compliance obligations. Keeping up with the evolving regulatory landscape and adapting internal processes accordingly is also a key aspect of the role.

What is the difference between Cgrc vs Compliance Analyst?

AspectCgrcCompliance Analyst
CertificationsCertifications like CFE, CISA, or CMMC often preferredCertifications such as CCEP, CISA, or CIA common
Work EnvironmentTypically in cybersecurity, risk management, or compliance teams within organizationsUsually in corporate compliance departments, auditing firms, or regulatory agencies
Industry UsageUsed in industries like finance, healthcare, and government for cybersecurity and risk managementCommon across various industries for regulatory compliance and risk assessment

The Cgrc (Certified Government Risk Compliance) focuses on government-specific regulations and cybersecurity risk management, while a Compliance Analyst generally handles broader regulatory compliance across industries. Both roles require understanding of compliance frameworks, but Cgrc emphasizes government standards and cybersecurity, making it more specialized in those areas.

Infographic showing various Cgrc job openings in Arizona as of August 2026, with employment types broken down into 87% Full Time, 10% Part Time, and 3% Contract. Highlights an 76% Physical, 5% Hybrid, and 19% Remote job distribution.

$109K - $148K/yr

Full-time

Medical, Dental, Vision, Life, Retirement, PTO

Posted 11 days ago


Lockheed Martin rating

8.2

Company rating: 8.2 out of 10

Based on 397 frontline employees who took The Breakroom Quiz

38th of 72 rated aerospace companies


Job description

Standard Job Description What We're Doing: Lockheed Martin's, Rotary & Mission Systems (LM RMS), F-35 Cyber Security invites you to step up to one of today's most daunting challenges: the protection of exquisite government capabilities leading to warfighter supremacy against our peer and near peer adversaries. As a cybersecurity professional at Lockheed Martin, you'll safeguard the sensitive information and warfighting capabilities that our citizens and the world depend upon to protect U.S. and ally interests

Here, you'll work alongside other cybersecurity experts, related departments, and military members to support the military operational objectives by providing them with a safe and secure operating environment. In this fast-paced, real-world environment, you'll draw on all your education and experience as well as the resources of Lockheed Martin to keep these exquisite capabilities protected. Who We Are: Lockheed Martin is a Cyber Security pioneer, partner, innovator and builder.

In support of our many customers, the amazing members of our team are responsible for providing all aspects of cybersecurity support in a complex environment. In a rapidly growing enterprise, this role offers the opportunity to grow and hone the unique skills and experiences required as a cybersecurity expert to create, design and build solutions to some of the world's hardest engineering problems. The Work This Classified Cyber Security Asc Manager/Lead Information System Security Officer (ISSO) position will support the Information System Security Manager (ISSM) as an additional leader on the team to oversee daily operations and leadership responsibilities, as well as developing, maintaining and overseeing the cybersecurity of assigned classified and/or unclassified F-35 systems at MCAS Miramar.

Responsibilities include but are not limited to: Primary representative for the on-site cybersecurity team; act on behalf of the ISSM in stakeholder meetings and communications. Drive the development and review of cybersecurity related policies, plans and procedures on behalf of the ISSM. Lead and manage assigned ISSO(s) in successful execution of the site's F-35 cybersecurity program, to include assuming ISSO responsibilities in their absence.

Lead the implementation and assessment of security controls as defined by the system authorization body of evidence. Lead self-inspections and verify site is prepared for customer inspections. Incident response focal point: ensure timely and accurate communication, documentation, investigation, response and closure to cyber incidents.

Monitor and recognize non-compliance, anomalous activity, and effectively report and track such activity and associated risks. Ensure POA&Ms or remediation plans are in place for vulnerabilities identified during monitoring activity, audits, inspections, etc. and implement, or oversee, corrective actions.

Create, collect and retain data to meet reporting requirements. Monitor and correlate data from a variety of sources to identify and mitigate threats, vulnerabilities and non-compliance.Assigned systems may vary in classification, capabilities and complexity. Mission requirements may require other than first-shift work and additional responsibilities as assigned

Why Join Us: Your Health, Your Wealth, Your Life Our flexible schedules, competitive pay and comprehensive benefits enable our employees to live a healthy, fulfilling life at and outside of work. At Lockheed Martin, we place an emphasis on empowering our employees by fostering innovation. We believe that by applying the highest standards of business ethics and visionary thinking, everything is within our reach - and yours as a Lockheed Martin employee.

Lockheed Martin values your skills, training and education. Come and experience your future. Basic Qualifications Final Transferable Secret security clearance; last Periodic Reinvestigation must be within the last five (5) years or enrollment in Continuous Vetting program.

Ability to obtain and maintain Special Access Program (SAP) access. Expertise in cybersecurity with a track record of leading technical teams to deliver complex projects using artifact-backed solutions based on independent analysis of information. Excellent communication, facilitation, and stakeholder management skills.

Ability to translate technical concepts into operationally relevant language. Possess a valid certification that meets or exceeds DoD 8570.01-M IAT II requirements. Meets: "Comptia SecurityX" CE, CGRC, CISM, CISSP (or Assc), GSLC, CCISO, HCISPP Prior experience in a cyber workforce role, as categorized by the NICE or DoD workforce frameworks

Desired Skills Prior experience as an ISSO, ISSM or related DoD Cyber Workforce Role on one or more F-35 information systems. Prior experience ensuring compliance with applicable laws, regulations, guidance and policies as they relate to DoD cybersecurity and SAPs (e.g., DoDI 8510.01, JSIG, DoDM 5205.07, NIST SP 800 series). Familiarity with F-35 product lifecycle management and sustainment operations, to include the system authorization process and associated artifacts (e.g., SSP, SCTM, Security CONOPs, SOPs) Experience using and configuring cyber SIEM and compliance tools (e.g., Splunk, Tenable) Proficient in AI prompting as it applies to this position and practice

Short Description Pay Information Full-Time Salary Range: $94400.00 - $175200.00 At Lockheed Martin, we know mission success starts with taking care of our people. Our Total Rewards program is designed to attract top talent, support your well-being, and help you grow-both professionally and personally. The salary range for this position is as listed on the requisition

Please note that the salary information listed is a general guideline only. Lockheed Martin considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/ training, key skills as well as market(work location) and business considerations when extending an offer. Benefits offered: Medical, Dental, Vision, Flexible work arrangements and schedules (e.g., 4x10), 401(k) match, Paid time off, Holidays, Parental Leave, EAP, Flexible Spending Accounts, Education Assistance, Life Insurance, Short-Term Disability, and Long-Term Disability

Annual short-term and/or long-term incentive compensation programs may be offered depending on the position. Payments under these annual programs are not guaranteed and can vary from year to year and are tied to a range of performance metrics. For (Washington state applicants only) Non-represented full-time employees: accrue at least 10 hours per month of Paid Time Off (PTO) to be used for incidental absences and other reasons; receive at least 90 hours for holidays.

Represented full time employees accrue 6.67 hours of Vacation per month; accrue up to 52 hours of sick leave annually; receive at least 96 hours for holidays. PTO, Vacation, sick leave, and holiday hours are prorated based on start date during the calendar year.


What Lockheed Martin employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom


Lockheed Martin logo

About Lockheed Martin

Sourced by ZipRecruiter

As a global security and aerospace company, the majority of Lockheed Martin's business is with the U.S. Department of Defense and U.S. federal government agencies.The remaining portion of Lockheed Martin's business is comprised of international government and commercial sales of products, services and platforms.

Industry

Manufacturing

Company size

10,000+ Employees

Headquarters location

Bethesda, MD, US

Year founded

1912