Senior IT Compliance & Security Governance Analyst

Zohorecruit; Lansing (MI); Hybrid; USD 100,000 - 135,000; Full time

Job summary

AtZenfreed is seeking a Senior IT Business/Compliance Analyst to provide senior-level oversight for SSPs and DRPs across MDCR, MCSC and MiLEAP, ensuring alignment with NIST and SOM standards. The role liaises between business partners, security groups, and management, guiding compliance cycles and governance.

The candidate will coordinate with vendors, auditors, project managers, and analysts to maintain evidence for SSP and ATO processes and to drive timely remediation of gaps.

Qualifications

• Bachelor’s degree in cyber security, Information Assurance, Business Analytics, or IT Related Field or 5 years experience
• Educational or professional knowledge of NIST Framework and Controls a must
• Strong aptitude for written and oral communication
• Can collaborate cross-functionally

Responsibilities

• Maintain and update System Security Plans (SSPs) and Disaster Recovery Plans (DRPs) to align with NIST protocol and SOM compliance standards.
• Lead and coordinate the Authority to Operate (ATO) renewal process, including planning, preparing required materials, managing timelines, and ensuring successful approval and continuous compliance for all supported applications.
• Ensure all applications maintain a valid ATO on a three-year cycle and lead efforts to validate and maintain accurate security controls throughout each renewal period.
• Perform as the incident response specialist for cyber event detection, correlation, response, and recovery.
• Oversee review, updates, and remediation of security controls, ensuring issues are tracked, communicated, and resolved in collaboration with stakeholders.

Job description

AtZenfreed is seeking a Senior IT Business/Compliance Analyst to provide senior-level oversight for SSPs and DRPs across MDCR, MCSC and MiLEAP, ensuring alignment with NIST and SOM standards. The role liaises between business partners, security groups, and management, guiding compliance cycles and governance.

The candidate will coordinate with vendors, auditors, project managers, and analysts to maintain evidence for SSP and ATO processes and to drive timely remediation of gaps.