IT Security Compliance Analyst

StaffXpert LLC; Michigan; Hybrid; USD 90,000 - 120,000; Full time

Job summary

STAFFXPERT LLC is seeking a Senior IT Compliance Analyst / IT Security Analyst in Lansing, MI to provide senior-level leadership in IT security compliance, governance, risk management, and security documentation.

The role focuses on SSPs, DRPs, ATO processes, security controls, and incident response, serving as a liaison between business stakeholders, technical teams, security groups, and management. Hybrid work arrangement in Lansing; onsite 2 days/week.

Qualifications

• 5+ years of experience providing audit evidence to comply with security standards such as NIST, PCI, HIPAA, or FERPA.
• 5+ years of professional experience with the NIST Framework and security controls.
• Experience working with complex IT web applications within the past 5 years.
• 5+ years of experience leading meetings and preparing oral and written reports.

Responsibilities

• Provide senior-level oversight for maintaining and updating System Security Plans (SSPs).
• Lead and coordinate Authority to Operate (ATO) renewal activities, including planning, documentation, timelines, and approvals.
• Ensure security controls remain accurate, documented, and aligned with applicable security standards.
• Review security risk assessments and recommend corrective actions.
• Track and manage Plans of Action & Milestones (POA&Ms) and other compliance requirements.

Skills

NIST Framework

Security Controls

Audit Evidence

Regulatory Compliance

Stakeholder Management

Communication

Education

Bachelor's degree in Cybersecurity, Information Assurance, Business Analytics, Information Technology, or related field

Job description

Senior IT Compliance Analyst / IT Security Analyst

Location: Lansing, MI (Local to Lansing or up to 2 hrs distance)

Work Arrangement: Hybrid – Onsite 2 Days/Week

Duration: 12 Months+

Interview: Virtual First Round | Potential In-Person Second Round

Job Summary

STAFFXPERT LLC is seeking a Senior IT Business/Compliance Analyst / IT Security Analyst on behalf of our client in Lansing, MI to provide senior-level leadership in IT security compliance, governance, risk management, and security documentation.

The role will focus on maintaining System Security Plans (SSPs), Disaster Recovery Plans (DRPs), Authority to Operate (ATO) processes, security controls, compliance documentation, and incident response while serving as a key liaison between business stakeholders, technical teams, security groups, and management.

Key Responsibilities

• Provide senior-level oversight for maintaining and updating System Security Plans (SSPs).
• Lead and coordinate Authority to Operate (ATO) renewal activities, including planning, documentation, timelines, and approvals.
• Ensure security controls remain accurate, documented, and aligned with applicable security standards.
• Review security risk assessments and recommend corrective actions.
• Track and manage Plans of Action & Milestones (POA&Ms) and other compliance requirements.
• Analyze compliance documentation, identify gaps and risks, and coordinate remediation activities.
• Coordinate with technical teams, business owners, security personnel, auditors, vendors, project managers, and other stakeholders.
• Ensure required security evidence and artifacts are properly completed and maintained.
• Oversee the review, update, and remediation of security controls.
• Identify procedural gaps and recommend improvements to strengthen security governance.
• Develop security metrics, management reports, and trend analysis related to risks and incidents.
• Provide guidance and mentoring to stakeholders and team members.
• Support mid- to high-level incident response activities.
• Contribute to cyber event detection, correlation, response, and recovery initiatives.
• Drive consistency and continuous improvement across security compliance processes.

Required Qualifications

• 5+ years of experience providing audit evidence to comply with security standards such as NIST, PCI, HIPAA, or FERPA.
• 5+ years of professional experience with the NIST Framework and security controls.
• Experience working with complex IT web applications within the past 5 years.
• 5+ years of experience leading meetings and preparing oral and written reports.
• 5+ years of experience serving as a liaison between business and IT teams.
• Bachelor's degree in Cybersecurity, Information Assurance, Business Analytics, Information Technology, or a related field.
• Strong understanding of security compliance, governance, risk management, and security documentation.
• Excellent communication, analytical, organizational, and stakeholder-management skills.

Preferred Qualifications

• 2+ years of experience creating documentation supporting IT system audits.
• Experience developing Business Continuity Plans (BCPs).
• Experience with ATO processes, SSPs, POA&Ms, and security control remediation.
• Advanced degree in:
• Cybersecurity
• Information Assurance
• MBA with an IT or Security concentration
• Experience supporting enterprise security governance and incident response programs.
• Hybrid position based in Lansing, Michigan.
• Onsite from Day 1, two days per week.
• Candidates must be local to the Lansing area.
• Candidates must be available for an in-person interview if requested.