Senior IT Security & GRC Lead (Hybrid)

MasterApp Labs LLC; Lansing (MI); Hybrid; USD 83,000 - 131,000; Part time

Benefits offered by this job

401(k)

Dental insurance

Health insurance

Vision insurance

Job summary

MasterApp Labs LLC is seeking a Senior IT Security Compliance Analyst in Lansing, MI (Hybrid: onsite 2 days/wk) for a contract role. You will lead SSP maintenance, ATO renewals, and cross‑functional risk management across multiple agencies.

You will drive compliance activities per NIST, develop reports, and guide remediation actions while collaborating with security and business teams. Strong documentation and communication skills are essential.

Qualifications

• Bachelor’s degree in cyber security, Information Assurance, Business Analytics, or IT Related Field OR: 5 years of experience.
• Master’s degrees are preferred in Cybersecurity, Information Assurance, Information Systems / IT Leadership, or MBA with IT/Security concentration.
• Educational or professional knowledge of NIST Framework and Controls is a must.
• Strong aptitude for written and oral communication.
• Strong documentation skills.
• Ability to collaborate cross-functionally.

Responsibilities

• Provide leadership and oversight for maintaining and updating System Security Plans (SSPs) per NIST and SOM standards.
• Coordinate Authority to Operate (ATO) renewal planning, materials, timelines, and approvals.
• Maintain ATO on a three-year cycle and ensure continued compliance of all applications.
• Review security risk assessments and recommend corrective actions.
• Develop reports from metrics across multiple agencies; conduct trend analysis.
• Address Plans of Action & Milestones (POA&Ms) and other compliance requirements with timely reporting and closure.
• Support across MDCR, MCSC & MiLEAP with SSP updates and documentation improvements.
• Analyze compliance documentation to identify gaps and guide corrective actions.
• Coordinate cross-functional collaboration to complete SSP/ATO evidence and artifacts.
• Oversee remediation of security controls and issue tracking with stakeholders.
• Identify procedural gaps during renewal cycles and apply best practices across systems.
• Contribute to enterprise security governance and mentor team members.
• Lead mid to high-level Incident Responses; be the incident response specialist for cyber events.
• Lead efforts on incident response and remediation.

Skills

GRC - governance, risk and compliance

Audit evidence & security standards

Complex IT web applications

Lead meetings & reports

Liaison between business & IT

IT system audits documentation

Disaster Recovery / Business Continuo​

Incident Response Plans

Education

Bachelor’s degree in cyber security, Information Assurance, Business Analytics, or IT Related Field

Job description

MasterApp Labs LLC is seeking a Senior IT Security Compliance Analyst in Lansing, MI (Hybrid: onsite 2 days/wk) for a contract role. You will lead SSP maintenance, ATO renewals, and cross‑functional risk management across multiple agencies.

You will drive compliance activities per NIST, develop reports, and guide remediation actions while collaborating with security and business teams. Strong documentation and communication skills are essential.