IT Security Analyst 3 – GRC / NIST / ATO / SSP – Lansing, MI (Local Candidates Only)

• StarTekk’s adoption of Digital Transformation is to accelerate organizational growth, increase efficiencies and help Star Workforce achieve focused business goals. The Employee will help our organization to identify and bridge the gap that exists in the business by analyzing the data, scale and support digital transformation initiatives.

We are looking for an experienced IT Security Analyst 3 with strong expertise in Governance, Risk & Compliance (GRC), NIST security frameworks, System Security Plans (SSPs), and Authority to Operate (ATO) processes.

The ideal candidate will provide senior-level compliance oversight, coordinate security assessments, maintain disaster recovery documentation, and work closely with business stakeholders, technical teams, auditors, and security leadership.

Key Responsibilities:

• Lead the creation, review, and maintenance of System Security Plans (SSPs) in alignment with NIST and organizational security standards.
• Coordinate Authority to Operate (ATO) renewals and ensure continuous compliance.
• Maintain and update Disaster Recovery Plans (DRPs).
• Review security risk assessments and recommend corrective actions.
• Manage Plans of Action & Milestones (POA&Ms) and track remediation activities.
• Coordinate audit evidence collection and compliance documentation.
• Collaborate with business stakeholders, IT teams, vendors, auditors, and management.
• Identify security control gaps and drive remediation efforts.
• Develop security reports, perform trend analysis, and communicate findings to management.
• Support cybersecurity incident response, detection, investigation, and recovery.

• 5+ years of IT security, compliance, or business analysis experience.
• 3+ years of Governance, Risk & Compliance (GRC) experience.
• 5 years of experience providing audit evidence for security standards such as NIST, PCI, HIPAA, and FERPA.
• Experience with complex IT web applications within the past 5 years.
• Strong experience leading meetings and preparing written and oral reports.
• Experience acting as a liaison between business and IT teams.
• Strong knowledge of NIST frameworks and security controls.

Highly Desired Skills:

• Experience creating Disaster Recovery Plans, Business Continuity Plans, and Incident Response Plans.
• Experience preparing supporting documentation for IT system audits.
• Keylight experience (strongly preferred).

• Candidates must currently reside within 90 miles of Lansing, MI.
• Must be available to work onsite two days per week starting Day 1.
• Local candidates only.

Interested candidates: Please share your updated resume along with current location and contact details.