IT Security Compliance Analyst

Stellar Professionals LLC; Town of Lansing (NY); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Stellar Professionals LLC is seeking an IT Security & Compliance Analyst to lead SSPs, ATO renewals, and incident response. The role requires a Senior IT Security & Compliance professional who can coordinate with audit teams and business stakeholders.

The position features a hybrid work arrangement with onsite requirements and cross-functional collaboration to strengthen security posture and regulatory compliance across systems.

Qualifications

• Provide audit evidence for NIST, PCI, HIPAA, or FERPA.
• Experience with complex IT web applications in the last 5 years.
• Lead meetings and deliver executive oral/written reports.
• Act as a liaison between business and IT across cross-functional teams.
• Bachelor's degree in Cybersecurity, IT, or related field (or 5 years equivalent).

Responsibilities

• Lead System Security Plans (SSPs) creation and updates.
• Oversee Authority to Operate (ATO) renewals and compliance tracking.
• Track and resolve Plans of Action & Milestones (POA&Ms).
• Serve as Incident Response Specialist for cyber event detection, correlation, and recovery.

Skills

Audit evidence

Web applications

Executive reports

Business IT liaison

Education

Bachelor's degree in Cybersecurity/IT

Job description

We are hiring an IT Security & Compliance Analyst to lead System Security Plans (SSPs), Authority to Operate (ATO) renewals, and incident response efforts.

Role Summary

• Position: Senior IT Security & Compliance Analyst
• Location: Lansing, MI (Local candidates within 90 miles required)
• Work Arrangement: Hybrid (Onsite 2 days/week from Day 1)
• Interview Process: Round 1 Virtual | Round 2 In-Person (Mandatory availability)

Key Responsibilities

• Lead System Security Plans (SSPs) and Disaster Recovery Plans (DRPs) creation and updates.
• Manage 3-year Authority to Operate (ATO) renewal cycles and compliance tracking.
• Track and resolve Plans of Action & Milestones (POA&Ms).
• Act as the liaison between business stakeholders, technical groups, and audit teams.
• Serve as an Incident Response Specialist for cyber event detection, correlation, and recovery.

Top Required Skills

• 5 Years providing audit evidence for NIST, PCI, HIPAA, or FERPA standards.
• 5 Years working with Complex IT Web Applications (within the last 5 years).
• 5 Years leading meetings and delivering executive oral and written reports.
• 5 Years acting as a Business & IT Liaison across cross-functional teams.
• Education: Bachelor's Degree in Cybersecurity, IT, or related field (or 5 years equivalent experience).

Highly Desired Skills

• 2 Years creating supporting documentation for IT system audits.
• 2 Years developing Disaster Recovery (DRP) , Business Continuity (BCP) , and Incident Response Plans (IRP).