IT Security Analyst 3 – GRC / NIST / ATO / SSP – Lansing, MI (Local Candidates Only)

STARTekk LLC; Lansing (MI); On-site; USD 90,000 - 120,000; Full time

Job summary

StarTekk is seeking an experienced IT Security Analyst 3 focused on Governance, Risk & Compliance (GRC). The role requires deep knowledge of NIST security frameworks, SSPs, and ATO processes, with responsibilities spanning risk assessments, audits, and remediation.

You will collaborate with stakeholders, IT teams, and auditors to maintain robust security controls. The ideal candidate will have 5+ years in IT security/compliance, 3+ years in GRC, and a proven track record in producing audit

Qualifications

• 5+ years of IT security, compliance, or business analysis experience.
• 3+ years of Governance, Risk & Compliance (GRC) experience.
• 5 years of experience providing audit evidence for security standards such as NIST, PCI, HIPAA, and FERPA.
• Experience with complex IT web applications within the past 5 years.
• Strong experience leading meetings and preparing written and oral reports.
• Experience acting as a liaison between business and IT teams.
• Strong knowledge of NIST frameworks and security controls.

Responsibilities

• Lead the creation, review, and maintenance of System Security Plans (SSPs) in alignment with NIST and organizational security standards.
• Coordinate Authority to Operate (ATO) renewals and ensure continuous compliance.
• Maintain and update Disaster Recovery Plans (DRPs).
• Review security risk assessments and recommend corrective actions.
• Manage Plans of Action & Milestones (POA&Ms) and track remediation activities.
• Coordinate audit evidence collection and compliance documentation.
• Collaborate with business stakeholders, IT teams, vendors, auditors, and management.
• Identify security control gaps and drive remediation efforts.
• Develop security reports, perform trend analysis, and communicate findings to management.
• Support cybersecurity incident response, detection, investigation, and recovery.

Skills

IT security experience

GRC experience

NIST frameworks familiarity

Stakeholder coordination

Security reporting

Tools

Keylight

Job description

Company Description

StarTekk’s adoption of Digital Transformation is to accelerate organizational growth, increase efficiencies and help Star Workforce achieve focused business goals. The Employee will help our organization to identify and bridge the gap that exists in the business by analyzing the data, scale and support digital transformation initiatives.

StarTekk’s adoption of Digital Transformation is to accelerate organizational growth, increase efficiencies and help Star Workforce achieve focused business goals. The Employee will help our organization to identify and bridge the gap that exists in the business by analyzing the data, scale and support digital transformation initiatives.

Job Description

We are looking for an experienced IT Security Analyst 3 with strong expertise in Governance, Risk & Compliance (GRC), NIST security frameworks, System Security Plans (SSPs), and Authority to Operate (ATO) processes. The ideal candidate will provide senior-level compliance oversight, coordinate security assessments, maintain disaster recovery documentation, and work closely with business stakeholders, technical teams, auditors, and security leadership.

Key Responsibilities:

• Lead the creation, review, and maintenance of System Security Plans (SSPs) in alignment with NIST and organizational security standards.
• Coordinate Authority to Operate (ATO) renewals and ensure continuous compliance.
• Maintain and update Disaster Recovery Plans (DRPs).
• Review security risk assessments and recommend corrective actions.
• Manage Plans of Action & Milestones (POA&Ms) and track remediation activities.
• Coordinate audit evidence collection and compliance documentation.
• Collaborate with business stakeholders, IT teams, vendors, auditors, and management.
• Identify security control gaps and drive remediation efforts.
• Develop security reports, perform trend analysis, and communicate findings to management.
• Support cybersecurity incident response, detection, investigation, and recovery.

Qualifications

• 5+ years of IT security, compliance, or business analysis experience.
• 3+ years of Governance, Risk & Compliance (GRC) experience.
• 5 years of experience providing audit evidence for security standards such as NIST, PCI, HIPAA, and FERPA.
• Experience with complex IT web applications within the past 5 years.
• Strong experience leading meetings and preparing written and oral reports.
• Experience acting as a liaison between business and IT teams.
• Strong knowledge of NIST frameworks and security controls.

Highly Desired Skills:

• Experience creating Disaster Recovery Plans, Business Continuity Plans, and Incident Response Plans.
• Experience preparing supporting documentation for IT system audits.
• Keylight experience (strongly preferred).

Additional Information

• Candidates must currently reside within 90 miles of Lansing, MI.
• Must be available to work onsite two days per week starting Day 1.
• Local candidates only.