Senior GRC Security Analyst - Hybrid Onsite (Lansing)

GSK Solutions Inc.; Lansing (MI); Híbrido; USD 76.000 - 83.000; Jornada completa

Descripción de la vacante

GSK Solutions Inc. is seeking a GRC Security Analyst to join a hybrid on-site role in Lansing, MI. The Senior Analyst will ensure compliance with NIST and Michigan standards, guiding stakeholders through complex cycles and coordinating with vendors, auditors, and project teams.

The position requires strong governance, risk, and compliance knowledge, experience with audit evidence, and the ability to work across multiple business areas. Local candidates within 90 miles of Lansing are preferred.

Formación

• Bachelor's degree or 5+ years of related experience.
• NIST Framework knowledge must.
• Strong written and oral communication; ability to collaborate cross-functionally.

Responsabilidades

• Maintain and update System Security Plans (SSPs) per NIST and SOM standards.
• Lead and coordinate the Authority to Operate (ATO) renewal process for all supported applications.
• Ensure applications maintain a valid ATO on a 3-year cycle and update security controls accordingly.
• Review security risk assessments and recommend corrective actions.
• Develop management reports from collected metrics and conduct trend analysis.
• Address Plans of Action & Milestones (POA&Ms) and ensure timely reporting/closure.
• Provide senior-level support across multiple business areas with standardized security plan updates.
• Identify gaps in compliance documentation and guide corrective actions.
• Coordinate cross-functional collaboration to ensure SSP/ATO evidence is complete and maintained.
• Oversee remediation of security controls and ensure issues are tracked and resolved.
• Identify procedural gaps during renewal cycles and apply best practices across systems.
• Contribute to enterprise security governance and mentor team members.
• Lead incident response activities as needed.

Conocimientos

GRC Experience

Audit Evidence

Web Apps

Reporting

Cross-Functional Liaison

Educación

Bachelor's degree in Cyber Security / IT

Advanced degree preferred (MBA with IT/Security)

Herramientas

Keylight

Descripción del empleo

GSK Solutions Inc. is seeking a GRC Security Analyst to join a hybrid on-site role in Lansing, MI. The Senior Analyst will ensure compliance with NIST and Michigan standards, guiding stakeholders through complex cycles and coordinating with vendors, auditors, and project teams.

The position requires strong governance, risk, and compliance knowledge, experience with audit evidence, and the ability to work across multiple business areas. Local candidates within 90 miles of Lansing are preferred.