IT Security Analyst 3 – GRC / NIST / ATO / SSP – Lansing, MI (Local Candidates Only)

We are looking for an experienced IT Security Analyst 3 with strong expertise in Governance, Risk & Compliance (GRC), NIST security frameworks, System Security Plans (SSPs), and Authority to Operate (ATO) processes.The ideal candidate will provide senior-level compliance oversight, coordinate security assessments, maintain disaster recovery documentation, and work closely with business stakeholders, technical teams, auditors, and security leadership.Key Responsibilities:Lead the creation, review, and maintenance of System Security Plans (SSPs) in alignment with NIST and organizational security standards.Coordinate Authority to Operate (ATO) renewals and ensure continuous compliance.Maintain and update Disaster Recovery Plans (DRPs).Review security risk assessments and recommend corrective actions.Manage Plans of Action & Milestones (POA&Ms) and track remediation activities.Coordinate audit evidence collection and compliance documentation.Collaborate with business stakeholders, IT teams, vendors, auditors, and management.Identify security control gaps and drive remediation efforts.Develop security reports, perform trend analysis, and communicate findings to management.Support cybersecurity incident response, detection, investigation, and recovery.