System Analyst 6 - Lansing, MI

Startekk Inc; Lansing (MI); On-site; USD 90,000 - 140,000; Full time

Job summary

StarTekk Inc. seeks a Security & Compliance Analyst to protect retirement benefits platforms and ensure regulatory adherence across programs. The role partners with cross-functional teams to enforce security controls and compliant processes in a public-sector context.

Responsibilities include documenting requirements, developing audit-ready materials, and leading security initiatives. Prior experience with NIST frameworks and Deloitte-like governance is favorable, with strong communication and

Qualifications

• 7+ years in security, compliance, risk mgmt in government/public retirement or regulated environment.
• Experience documenting evaluating security controls, governance processes.
• Experience with security assessments, audits, policy reviews, control validations.
• 5+ years with NIST CSF/800-53 and state IT security standards.
• Knowledge of Agile SDLC with security integrated into requirements and testing.
• Ability to assess vulnerabilities (XSS/CSRF/SQLi) and authentication issues.
• 5+ years using tools like Azure DevOps and GRC platforms.
• Experience contributing to Disaster Recovery and business continuity.

Responsibilities

• Analyze, document, and validate security processes and interagency interactions.
• Define security/compliance requirements for system enhancements and policy updates.
• Create and maintain audit-ready security requirements, workflows, use cases, and documents.
• Support solution design and testing, including UAT, for security controls.
• Recommend improvements to strengthen security posture and program accountability.
• Monitor deliverables to ensure alignment with security/compliance objectives.
• Develop training materials and educate staff on security and compliance.
• Conduct gap analyses for legislative/regulatory changes.
• Perform data analysis and generate reports for compliance monitoring.

Skills

Security controls

Risk management

Regulatory compliance

NIST CSF

Agile SDLC

Documentation

Azure DevOps

GRC platforms

Education

Bachelor's degree in Information Security or related field

Tools

Azure DevOps

Power BI

SQL

Job description

• StarTekk’s adoption of Digital Transformation is to accelerate organizational growth, increase efficiencies and help Star Workforce achieve focused business goals. The Employee will help our organization to identify and bridge the gap that exists in the business by analyzing the data, scale and support digital transformation initiatives.

Job Description

The Security & Compliance Analyst supports the integrity, security, and compliance of systems and processes used to administer retirement benefits for public sector employees. This role ensures that technology solutions, operational practices, and policy implementations adhere to state regulations, security standards, and organizational governance requirements.

The analyst will collaborate with cross-functional teams to strengthen security controls, improve business processes, and ensure secure and reliable delivery of services to stakeholders and citizens.

Key Responsibilities

• Analyze, document, and validate security processes, system requirements, and interagency interactions supporting retirement benefits administration.
• Collaborate with program offices, technical teams, and subject matter experts to define security and compliance requirements for system enhancements, policy updates, and new initiatives.
• Create and maintain audit-ready security requirements, user stories, workflows, use cases, and other documentation.
• Support solution design and participate in testing, including UAT, to verify security controls and compliance requirements.
• Recommend improvements to strengthen security posture, process efficiency, and program accountability.
• Monitor project deliverables, timelines, and milestones to ensure alignment with security and compliance objectives.
• Develop training materials and support security and compliance education for program staff and stakeholders.
• Conduct gap analyses and assess impacts of legislative, regulatory, and policy changes.
• Perform data analysis and generate reports for compliance monitoring, risk tracking, performance evaluation, and decision-making.

Qualifications

• 7+ years of professional experience in security, compliance, risk management, or a closely related discipline within a government agency, public retirement system, or regulated financial environment.
• Experience developing, documenting, and evaluating security controls, compliance requirements, and governance processes.
• Experience supporting security/compliance assessments, audits, policy reviews, and control validations.
• 5+ years of experience with security and compliance frameworks such as NIST CSF, NIST 800-53, and state IT security standards.
• Experience supporting system or process changes involving data protection, access controls, regulatory compliance, and secure implementation.
• Knowledge of Agile SDLC practices with security and compliance integrated into requirements, testing, and release processes.
• Ability to assess common application vulnerabilities, including XSS, CSRF, SQL Injection, and authentication weaknesses.
• 5+ years of experience with tools supporting security documentation, compliance tracking, and workflow management, such as Azure DevOps and GRC platforms.
• Experience contributing to Disaster Recovery Plans and business continuity activities.

Preferred Qualifications

• Bachelor's degree in Information Security, Cybersecurity, Information Systems, Public Administration, or a related field, or equivalent experience.
• Experience supporting security and compliance for public pension or retirement administration programs.
• Knowledge of security capabilities and data protection requirements within pension administration or enterprise benefits systems.
• Experience with SQL, Power BI, advanced Excel, or other analytics tools for compliance monitoring, reporting, security metrics, and data validation.
• Security or compliance certifications such as CGRC, CAP, Security+, CISA, or similar.
• Knowledge of state and federal regulations related to data security, privacy, and compliance within public sector retirement systems.
• Familiarity with Java or .NET.
• High-level understanding of web application architecture and functionality.

Additional Information

• Provide guidance and informal leadership to cross-functional teams on security, compliance, and risk management best practices.
• Lead discussions with stakeholders and technology teams regarding security objectives and compliance expectations.
• Mentor analysts on security frameworks, requirements documentation, and governance processes.
• Promote security awareness and continuous improvement.
• Lead key security and compliance initiatives and ensure deliverables meet organizational and regulatory standards.
• Support security incidents, compliance issues, and audit activities by coordinating responses and communications.

Security & Compliance Support

• Support internal and external security and standards reviews.
• Conduct security risk assessments and recommend mitigation strategies.
• Develop and maintain security documentation, including System Security Plans, Assessment Reports, and Authorization packages.
• Support security audits by gathering documentation and demonstrating control effectiveness.