IT Security Analyst 3

hnminfotech; Lansing (MI); Hybrid; USD 60,000 - 90,000; Full time

Job summary

An innovative firm is seeking an IT Security Analyst to enhance security compliance across various applications. This role involves ensuring adherence to federal and state regulations, interpreting security frameworks, and acting as a liaison between divisions and vendors. The ideal candidate will possess strong communication skills and experience in Cyber Security and NIST standards. Join a dynamic team dedicated to maintaining high security standards and making a significant impact on the organization's compliance efforts.

Qualifications

• 3-5 years of experience in Cyber Security and compliance.
• Strong communication skills to liaise with technical and non-technical stakeholders.

Responsibilities

• Ensure compliance with security standards and regulations.
• Support staff and coordinate with external vendors.

Skills

Cyber Security

NIST 800-53

Communication Skills

Microsoft SharePoint

Microsoft Excel

Tools

Keylight (by Navex)

Job description

IT Security Analyst 3 // Lansing, MI // Hybrid

Clear and concise communication skills required.

Top Skills & Years of Experience Required: 3-5 years' experience in the following areas:

1. Knowledge of Cyber Security
2. NIST 800-53
3. Follow the IT security technical architecture design methodology and best practices
4. External Vendor contact/Communication skills
5. Microsoft SharePoint
6. Microsoft Excel

This position functions as a Compliance Specialist supporting the Agency Services Divisions. Responsibilities include security compliance design, planning, implementation, and support for customer applications, ensuring adherence to Federal, State, and Industry security requirements. The role involves working as a liaison between Agency Services, other divisions, and vendor partners, requiring excellent communication and presentation skills to explain technical information to both technical and non-technical stakeholders.

The division manages over 100 applications with diverse compliance requirements, including but not limited to NIST 800-53, IRS Publication 1075, DTMB policies, and regulations concerning PHI, PI, and PII. The specialist ensures policies, processes, and security mandates are followed, interpreting frameworks, regulations, laws, policies, and GRC tools.

Core Responsibilities:

• Ensure compliance with security standards and regulations
• Support staff and coordinate with external vendors
• Interpret and implement security frameworks and policies

Nice to Haves:

• Expertise in PCI DSS, IRS Publication 1075, and IRS SCSEMs
• Knowledge of CJIS, CMS, HIPAA security frameworks
• SOC II knowledge
• Experience with Keylight (by Navex) GRC Tool