Business Analyst

Robotics Technologies; Dallas (TX); On-site; USD 90,000 - 120,000; Full time

Job summary

The State of Michigan is seeking an experienced IT Security Analyst 3 to support security compliance, governance, and risk management across MDCR, MCSC, and MiLEAP applications. This resource will serve as a senior compliance analyst and liaison between business stakeholders, technical teams, security groups, management, vendors, and auditors.

The primary focus is maintaining and updating System Security Plans (SSPs), coordinating Authority to Operate (ATO) renewals, managing security controls,

Responsibilities

• Lead the preparation, maintenance, and updating of System Security Plans (SSPs).
• Coordinate Authority to Operate (ATO) renewal activities, including documentation, timelines, approvals, and compliance tracking.
• Ensure applications maintain valid ATO approvals on the required three-year cycle.
• Review security risk assessments and recommend corrective actions to management.
• Identify compliance gaps, security risks, and control deficiencies.
• Manage and track Plans of Action and Milestones (POA&Ms) through resolution.
• Coordinate with business owners, technical teams, enterprise security groups, vendors, auditors, and project managers.
• Collect, review, and maintain security evidence and artifacts required for SSP and ATO processes.
• Oversee security control reviews, updates, remediation, and compliance reporting.
• Develop management reports, analyze security metrics, and identify trends across supported agencies.
• Lead and coordinate compliance activities across MDCR, MCSC, and MiLEAP.
• Support incident response activities, including cyber event detection, correlation, response, and recovery.
• Maintain accurate compliance documentation and records.
• Provide guidance to stakeholders and support consistent security governance practices.

Job description

US Citizen, Green Card, H-1B, OPT-EAD, CPT, Other

Work Authorization:US Citizen, Green Card, OPT-EAD, CPT, H-1B, H4-EAD, Other Job Summary:

The State of Michigan is seeking an experienced IT Security Analyst 3 to support security compliance, governance, and risk management activities across MDCR, MCSC, and MiLEAP applications. The resource will serve as a senior compliance analyst and liaison between business stakeholders, technical teams, security groups, management, vendors, and auditors. The primary focus is maintaining and updating System Security Plans (SSPs), coordinating Authority to Operate (ATO) renewals, managing security controls, and ensuring compliance with State of Michigan standards and NIST requirements.

Key Responsibilities

• Lead the preparation, maintenance, and updating of System Security Plans (SSPs).
• Coordinate Authority to Operate (ATO) renewal activities, including documentation, timelines, approvals, and compliance tracking.
• Ensure applications maintain valid ATO approvals on the required three-year cycle.
• Review security risk assessments and recommend corrective actions to management.
• Identify compliance gaps, security risks, and control deficiencies.
• Manage and track Plans of Action and Milestones (POA&Ms) through resolution.
• Coordinate with business owners, technical teams, enterprise security groups, vendors, auditors, and project managers.
• Collect, review, and maintain security evidence and artifacts required for SSP and ATO processes.
• Oversee security control reviews, updates, remediation, and compliance reporting.
• Develop management reports, analyze security metrics, and identify trends across supported agencies.
• Lead and coordinate compliance activities across MDCR, MCSC, and MiLEAP.
• Support incident response activities, including cyber event detection, correlation, response, and recovery.
• Maintain accurate compliance documentation and records.
• Provide guidance to stakeholders and support consistent security governance practices.

We are an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, national origin, citizenship/ immigration status, veteran status, or any other status protected under federal, state, or local law.