Senior IT Compliance Analyst | Hybrid | NIST 800-53 & Audits

State of Michigan; Lansing (MI); Hybrid; USD 70,000 - 100,000; Full time

Benefits offered by this job

Tuition reduction program

Professional development opportunities

Generous vacation and sick time

Signing bonus up to $2,500

Job summary

The State of Michigan is seeking a Senior IT Compliance Analyst in Lansing to prepare and maintain System Security Plans for MDOS applications, aligning security controls with NIST 800-53 and applicable laws. The role involves audits, training, and cross‑functional collaboration across IT and business units.

You will work in DTMB with a hybrid schedule, coordinating with stakeholders to ensure secure, compliant IT operations and reporting on security posture and processes.

Qualifications

• Strong interpersonal and written communication skills.
• Ability to prepare detailed written instructions and documentation.
• Ability to work effectively with a wide variety of people.
• Ability to manage time and workload effectively.
• Commitment to quality customer service and teamwork.

Responsibilities

• Develop and maintain System Security Plans for MDOS applications per NIST 800-53 and state/federal requirements.
• Interpret security controls and prepare documentation using the State GRC tool and related materials.
• Assist with audits by collecting and organizing responses and materials.
• Provide training and outreach to IT and non-IT staff on process requirements.

Skills

Interpersonal communication

Documentation & writing

Stakeholder management

Time management

Customer service

Team collaboration

Education

Bachelor's degree in CS/IS/IT

Job description

The State of Michigan is seeking a Senior IT Compliance Analyst in Lansing to prepare and maintain System Security Plans for MDOS applications, aligning security controls with NIST 800-53 and applicable laws. The role involves audits, training, and cross‑functional collaboration across IT and business units.

You will work in DTMB with a hybrid schedule, coordinating with stakeholders to ensure secure, compliant IT operations and reporting on security posture and processes.