IT Compliance & Security Analyst: NIST/HIPAA for 200+ Apps

DGS Office of External Affairs; Lansing (MI); On-site; USD 60,000 - 90,000; Full time

Job summary

DGS Office of External Affairs in Lansing, Michigan, is seeking an IT Compliance Analyst to support the Michigan Department of Health and Human Services by maintaining System Security Plans for 200+ applications. The role interprets security controls per NIST 800-53, HIPAA, MARS-e, and Pub 1075, and uses the State's GRC tool.

Responsibilities include collecting audit documentation, training IT and non-IT staff, and delivering presentations on compliance topics.

Qualifications

• Bachelor's degree with 21 semester credits in IT field or related area
• Knowledge of NIST 800-53, HIPAA, MARS-e, Pub 1075 and other security compliance frameworks
• Experience with System Security Plans, security documentation, and regulatory audits
• Ability to train IT and non-IT staff on compliance processes
• Strong documentation and communication skills for audit support (internal, state, and federal)

Responsibilities

• Complete and maintain System Security Plans for 200+ applications
• Interpret security implementations based on NIST 800-53, HIPAA, MARS-e, Pub 1075 and other frameworks
• Collect audit documentation and support audits
• Train IT and non-IT staff on compliance processes
• Conduct presentations on compliance topics

Education

Bachelor's degree with 21 semester credits in computer science, data processing, computer information systems, networking, systems analysis, or related IT field

Knowledge of NIST 800-53, HIPAA, MARS-e, Pub 1075, and other security compliance frameworks

Experience with System Security Plans, security documentation, and regulatory audits

Ability to train IT and non-IT staff on compliance processes

Strong documentation and communication skills for internal, state, and federal audit support

Tools

GRC tool

Job description

DGS Office of External Affairs in Lansing, Michigan, is seeking an IT Compliance Analyst to support the Michigan Department of Health and Human Services by maintaining System Security Plans for 200+ applications. The role interprets security controls per NIST 800-53, HIPAA, MARS-e, and Pub 1075, and uses the State's GRC tool.

Responsibilities include collecting audit documentation, training IT and non-IT staff, and delivering presentations on compliance topics.