IT Security Analyst: NIST & SSP Compliance Lead

Nanosoft Consulting Talent Page; Lansing (MI); On-site; USD 65,000 - 90,000; Full time

Job summary

A leading consulting firm in Michigan is seeking an IT Security Analyst to develop and maintain system security plans. The role involves close collaboration with IT teams and ensuring compliance with NIST controls and other regulatory requirements. Candidates should possess strong analytical, communication, and team collaboration skills alongside relevant experience in information security practices. This is an excellent opportunity to contribute to the security posture of dynamic projects.

Qualifications

• 1 year experience in the IT industry analyzing and applying information security principles.
• 1 year experience reviewing IT systems/applications with basic networking knowledge.
• 1 year experience analyzing NIST Special Publications.
• 2 years experience with Security Frameworks and regulatory requirements.
• Strong collaboration and communication skills.

Responsibilities

• Complete and maintain system security plans for new and existing systems.
• Coordinate with IT project teams and business security representatives.
• Create system security plans for new applications.
• Monitor plans of action and milestones as they relate to SSPs.
• Validate SSPs to ensure NIST control requirements are met.

Skills

Information security principles

Basic networking components knowledge

NIST Special Publications knowledge

Security Frameworks (ISO, NIST, COBIT)

Written communication

Verbal communication

Education

CISSP or CISA or PMP or Security+ certification

Job description

A leading consulting firm in Michigan is seeking an IT Security Analyst to develop and maintain system security plans. The role involves close collaboration with IT teams and ensuring compliance with NIST controls and other regulatory requirements. Candidates should possess strong analytical, communication, and team collaboration skills alongside relevant experience in information security practices. This is an excellent opportunity to contribute to the security posture of dynamic projects.