Jobs → Data & Analytics → GRC Security Analyst

About the Role We are looking for an experienced GRC Security Analyst for a 12-month contract opportunity supporting State of Michigan security and compliance initiatives. Key Responsibilities • Lead and maintain System Security Plans (SSPs) • Coordinate Authority to Operate (ATO) renewals and compliance activities • Manage security controls, risk assessments, and POA&Ms • Ensure compliance with NIST standards and State of Michigan security requirements • Provide audit evidence and support security assessments • Collaborate with vendors, auditors, project managers, and technical stakeholders • Support cybersecurity incident response, detection, and recovery Requirements • 3+ years of Governance, Risk & Compliance (GRC) experience • 5+ years providing audit evidence for NIST, PCI, HIPAA, FERPA, or similar standards • 5+ years of experience with complex IT web applications • 5+ years leading meetings and preparing reports • 5+ years working as a liaison between business and IT teams • Strong knowledge of NIST frameworks and security controls • Michigan local candidates ONLY • Must reside within 90 miles of Lansing, MI at the time of submission Preferred Qualifications • Keylight experience • Experience creating IT audit documentation • Knowledge of Disaster Recovery, Business Continuity, and Incident Response Plans • Bachelor's degree in Cybersecurity, Information Assurance, IT, or related field (or equivalent experience)