Senior IT Security & Compliance Analyst

ATC; Lansing (MI); In loco; USD 90.000 - 130.000; Tempo pieno

Descrizione del lavoro

ATC in Lansing, MI is seeking a Senior IT Business/Compliance Analyst to support the MDCR, MCSC and MiLEAP initiatives. The role provides high-level oversight for System Security Plans and Disaster Recovery Plans, ensuring alignment with NIST protocols and State of Michigan security governance.

The analyst acts as the compliance authority and liaison among business partners, technical teams, security groups, auditors, and project managers.

Competenze

• Bachelor's degree in cyber security, information assurance, business analytics, or related IT field or 5 years of experience.
• Advanced degrees (Masters/MBA) with IT or security focus are preferred.
• Knowledge of NIST framework and controls is required.
• Strong written and oral communication skills and cross-functional collaboration.

Mansioni

• Provide leadership for maintaining SSPs, ensuring accuracy and alignment with NIST and SOM.
• Lead ATO renewal planning, materials, timelines, and ongoing compliance for all apps.
• Ensure valid ATO on a three-year cycle and maintain security controls during renewals.
• Review security risk findings and suggest corrective actions.
• Assess risks for high-level incidents and develop management reports with trend analysis.
• Coordinate Plans of Action & Milestones (POA&Ms) tracking with stakeholders.
• Provide senior-level support across MDCR, MCSC & MiLEAP for standardized security updates.
• Identify gaps in compliance docs and guide corrective actions to meet requirements.
• Collaborate with technical teams, business owners, and project leadership for SSP/ATO evidence.
• Oversee remediation of security controls and ensure timely communication and closure.
• Identify procedural gaps during renewals and apply best practices across systems.
• Contribute to enterprise security governance, mentoring, and timely compliance activities.
• Lead mid to high-level incident responses and act as incident response specialist.

Conoscenze

Governance, Risk and Compliance (GRC)

Audit evidence for security standards

Complex IT web Applications

Leading meetings & reports

Liaison between business and IT

Documentation for IT system audits

Disaster Recovery Plans / BC Plans /IR

Formazione

Bachelor's degree in cyber security, Information Assurance, Business Analytics, or IT Related Field

Advanced Degrees preferred (Masters or MBA with IT/Security concentration)

Descrizione del lavoro

ATC in Lansing, MI is seeking a Senior IT Business/Compliance Analyst to support the MDCR, MCSC and MiLEAP initiatives. The role provides high-level oversight for System Security Plans and Disaster Recovery Plans, ensuring alignment with NIST protocols and State of Michigan security governance.

The analyst acts as the compliance authority and liaison among business partners, technical teams, security groups, auditors, and project managers.