Business Analyst

Cloud Analytics Technologies, LLC; Dallas (TX); On-site; USD 85,000 - 120,000; Full time

Job summary

Cloud Analytics Technologies, LLC seeks an experienced IT Security Analyst 3 for a State of Michigan program to support security compliance, governance, and risk management across multiple applications. The role focuses on SSP maintenance, ATO renewals, and aligning with NIST requirements.

The successful candidate will liaise with business, technical, security, vendors, auditors, and project managers to ensure continuous compliance and robust security controls.

Qualifications

• Experience creating and maintaining System Security Plans (SSPs).
• Coordinate Authority to Operate (ATO) renewals and tracking.
• Ensure applications maintain valid ATO on a three-year cycle.
• Review security risk assessments and recommend corrective actions.

Responsibilities

• Lead the preparation, maintenance, and updating of SSPs.
• Coordinate ATO renewal activities, including documentation, timelines, approvals, and compliance tracking.
• Ensure applications maintain valid ATO approvals on the three-year cycle.
• Review security risk assessments and recommend corrective actions to management.
• Identify compliance gaps, security risks, and control deficiencies.
• Manage and track Plans of Action and Milestones (POA&Ms) through resolution.
• Coordinate with business owners, technical teams, enterprise security groups, vendors, auditors, and project managers.
• Collect, review, and maintain security evidence and artifacts required for SSP and ATO processes.
• Oversee security control reviews, updates, remediation, and compliance reporting.
• Develop management reports, analyze security metrics, and identify trends across supported agencies.
• Lead and coordinate compliance activities across MDCR, MCSC, and MiLEAP.
• Support incident response activities, including cyber event detection, correlation, response, and recovery.
• Maintain accurate compliance documentation and records.
• Provide guidance to stakeholders and support consistent security governance practices.

Skills

SSP development

Compliance governance

Risk assessment

Security metrics

Job description

US Citizen, Green Card, H-1B, OPT-EAD, CPT, Other

Work Authorization: US Citizen, Green Card, OPT-EAD, CPT, H-1B, H4-EAD, Other

Job Summary

The State of Michigan is seeking an experienced IT Security Analyst 3 to support security compliance, governance, and risk management activities across MDCR, MCSC, and MiLEAP applications. The resource will serve as a senior compliance analyst and liaison between business stakeholders, technical teams, security groups, management, vendors, and auditors. The primary focus is maintaining and updating System Security Plans (SSPs), coordinating Authority to Operate (ATO) renewals, managing security controls, and ensuring compliance with State of Michigan standards and NIST requirements.

Key Responsibilities

• Lead the preparation, maintenance, and updating of System Security Plans (SSPs).
• Coordinate Authority to Operate (ATO) renewal activities, including documentation, timelines, approvals, and compliance tracking.
• Ensure applications maintain valid ATO approvals on the required three-year cycle.
• Review security risk assessments and recommend corrective actions to management.
• Identify compliance gaps, security risks, and control deficiencies.
• Manage and track Plans of Action and Milestones (POA&Ms) through resolution.
• Coordinate with business owners, technical teams, enterprise security groups, vendors, auditors, and project managers.
• Collect, review, and maintain security evidence and artifacts required for SSP and ATO processes.
• Oversee security control reviews, updates, remediation, and compliance reporting.
• Develop management reports, analyze security metrics, and identify trends across supported agencies.
• Lead and coordinate compliance activities across MDCR, MCSC, and MiLEAP.
• Support incident response activities, including cyber event detection, correlation, response, and recovery.
• Maintain accurate compliance documentation and records.
• Provide guidance to stakeholders and support consistent security governance practices.

We are an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, national origin, citizenship/ immigration status, veteran status, or any other status protected under federal, state, or local law.