Hybrid GRC Analyst: Security & Compliance Lead

GSK Solutions; Lansing (MI); Hybrid; USD 75,000 - 105,000; Full time

Job summary

GSK Solutions seeks a GRC Analyst to join our security and compliance team in Lansing, MI on a hybrid onsite arrangement. You will support retirement benefits systems, ensuring regulatory alignment, risk management, and secure operations across interagency workflows.

You will author security controls, contribute to audit readiness, guide program staff, and participate in DRP/BCP planning, vulnerability management, and incident response to uphold state standards.

Qualifications

• Seven years of professional experience in security, compliance, risk management in a government/public retirement setting.
• Experience documenting security controls, governance processes.
• Experience supporting audits, policy reviews and control validations.
• Knowledge of NIST CSF, NIST 800-53 and state IT security standards.
• Experience with Agile SDLC and secure deployment practices.
• Familiarity with security analytics using SQL/Power BI.

Responsibilities

• Analyze and validate security processes and interagency interactions for retirement benefits systems.
• Define and refine security and compliance requirements for system enhancements and policy updates.
• Create audit-ready documentation including requirements, workflows, and use cases.
• Support testing and UAT to verify security controls and compliance.
• Monitor deliverables and ensure alignment with security objectives and governance.
• Provide security training materials to program staff.
• Lead security incident responses and assist audit activities.

Skills

Security & compliance

Risk management

Governance processes

Interagency collaboration

Audit support

Education

Bachelor's degree in information security or related field

Equivalent experience

Tools

Azure DevOps

GRC platforms

Power BI

SQL

Job description

GSK Solutions seeks a GRC Analyst to join our security and compliance team in Lansing, MI on a hybrid onsite arrangement. You will support retirement benefits systems, ensuring regulatory alignment, risk management, and secure operations across interagency workflows.

You will author security controls, contribute to audit readiness, guide program staff, and participate in DRP/BCP planning, vulnerability management, and incident response to uphold state standards.