Senior IT Security & GRC Analyst — NIST, ATO, SSP

STARTekk LLC; Lansing (MI); On-site; USD 90,000 - 120,000; Full time

Job summary

StarTekk is seeking an experienced IT Security Analyst 3 focused on Governance, Risk & Compliance (GRC). The role requires deep knowledge of NIST security frameworks, SSPs, and ATO processes, with responsibilities spanning risk assessments, audits, and remediation.

You will collaborate with stakeholders, IT teams, and auditors to maintain robust security controls. The ideal candidate will have 5+ years in IT security/compliance, 3+ years in GRC, and a proven track record in producing audit

Qualifications

• 5+ years of IT security, compliance, or business analysis experience.
• 3+ years of Governance, Risk & Compliance (GRC) experience.
• 5 years of experience providing audit evidence for security standards such as NIST, PCI, HIPAA, and FERPA.
• Experience with complex IT web applications within the past 5 years.
• Strong experience leading meetings and preparing written and oral reports.
• Experience acting as a liaison between business and IT teams.
• Strong knowledge of NIST frameworks and security controls.

Responsibilities

• Lead the creation, review, and maintenance of System Security Plans (SSPs) in alignment with NIST and organizational security standards.
• Coordinate Authority to Operate (ATO) renewals and ensure continuous compliance.
• Maintain and update Disaster Recovery Plans (DRPs).
• Review security risk assessments and recommend corrective actions.
• Manage Plans of Action & Milestones (POA&Ms) and track remediation activities.
• Coordinate audit evidence collection and compliance documentation.
• Collaborate with business stakeholders, IT teams, vendors, auditors, and management.
• Identify security control gaps and drive remediation efforts.
• Develop security reports, perform trend analysis, and communicate findings to management.
• Support cybersecurity incident response, detection, investigation, and recovery.

Skills

IT security experience

GRC experience

NIST frameworks familiarity

Stakeholder coordination

Security reporting

Tools

Keylight

Job description

StarTekk is seeking an experienced IT Security Analyst 3 focused on Governance, Risk & Compliance (GRC). The role requires deep knowledge of NIST security frameworks, SSPs, and ATO processes, with responsibilities spanning risk assessments, audits, and remediation.

You will collaborate with stakeholders, IT teams, and auditors to maintain robust security controls. The ideal candidate will have 5+ years in IT security/compliance, 3+ years in GRC, and a proven track record in producing audit