GRC & Compliance Lead, Senior IT Analyst (Hybrid)

Aroha Technologies, Inc

Lansing (MI)

Hybrid

USD 90,000 - 140,000

Full time

2 days ago

Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

Aroha Technologies, Inc is seeking a Senior IT Business / Compliance Analyst to support DTMB Agency Services for MDCR, MCSC, and MiLEAP. You will oversee SSPs and DRPs, serving as the compliance authority between business and technical teams.

The role emphasizes state standards, NIST guidance, and enterprise security governance. You will guide stakeholders through complex compliance cycles, coordinate with vendors and auditors, and ensure timely completion of compliance activities across

Qualifications

Bachelor's degree in Cybersecurity, Information Assurance, Business Analytics, or related IT field is required.
5+ years of GRC experience considered; knowledge of NIST required.
Experience with NIST framework and security controls is mandatory.
Strong written and verbal communication skills are essential.
Excellent documentation skills and cross-team collaboration ability.

Responsibilities

Provide leadership for maintaining SSPs, aligned with NIST and Michigan standards.
Lead ATO renewal planning, materials, timelines, and approvals.
Ensure applications maintain valid ATOs on a three-year cycle.
Review risk assessment results and recommend corrective actions.
Develop management reports from security metrics across agencies.
Coordinate POA&M tracking and closure with stakeholders.
Guide standardized security plan updates and documentation improvements.
Identify gaps in compliance and direct corrective actions.
Ensure evidence for SSP and ATO processes is complete and maintained.
Oversee remediation of security controls and incident response coordination.
Mentor team members and promote best security practices.