Senior IT Compliance & Risk Lead

Apex Systems; Lansing (MI); On-site; USD 55,000 - 72,000; Full time

Job summary

Apex Systems is seeking a Senior IT Business/Compliance Analyst in Lansing, MI to act as compliance authority across business, security, and IT teams. You will drive SSP maintenance, ATO renewals, and risk assessments to ensure regulatory alignment and governance.

The role requires strong experience in NIST, PCI, HIPAA, FERPA, and cross-functional collaboration, including vendors and project managers. A background in security controls and incident response is essential.

Qualifications

• Bachelor’s degree in cyber security, Information Assurance, Business Analytics, or IT Related Field OR 5 years of experience
• Educational or professional knowledge of NIST Framework and Controls a must
• Strong written and oral communication skills
• Ability to collaborate cross-functionally and lead meetings
• Proven experience providing audit evidence to comply with standards like NIST, PCI, HIPAA, FERPA
• Experience maintaining SSPs, ATO renewals, and security controls across applications
• Experience coordinating cross-functional collaboration for SSP/ATO evidence

Responsibilities

• Provide leadership for maintaining and updating System Security Plans (SSPs).
• Lead ATO renewal process, planning materials and managing timelines.
• Ensure applications have a valid ATO on a 3-year cycle and update controls.
• Analyze security risk assessments and propose corrective actions.
• Develop management reports from metrics across agencies.
• Track Plans of Action & Milestones (POA&Ms) and ensure timely closure.
• Support standardized security plan updates and documentation improvements.
• Identify gaps in compliance documentation and guide corrective actions.
• Coordinate evidence for SSP and ATO with stakeholders.

Skills

GRC

Audit evidence

NIST

Stakeholder liaison

Incident response

Disaster Recovery

Business Continuity

POA&Ms

Education

Bachelor’s degree in cyber security / information assurance / IT related field

5 years of experience in related field

Tools

Keylight

Job description

Apex Systems is seeking a Senior IT Business/Compliance Analyst in Lansing, MI to act as compliance authority across business, security, and IT teams. You will drive SSP maintenance, ATO renewals, and risk assessments to ensure regulatory alignment and governance.

The role requires strong experience in NIST, PCI, HIPAA, FERPA, and cross-functional collaboration, including vendors and project managers. A background in security controls and incident response is essential.