Senior IT Security & Compliance Analyst

Syntricate; Town of Lansing (NY); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Syntricate is seeking an IT Security Analyst 3 to act as the compliance authority among business partners, technical teams, security groups, and management. You will ensure alignment with State standards, NIST protocols, and enterprise security governance, guiding stakeholders through complex compliance cycles and working with vendors, auditors, and project managers.

Responsibilities include SSP maintenance, ATO renewals, risk assessment reviews, and reporting across multiple agencies.

Qualifications

• Bachelor's degree in cyber security, Information Assurance, Business Analytics, or IT Related Field.
• OR: 5 years of experience.
• Educational or professional knowledge of NIST Framework and Controls a must.
• Strong aptitude for written and oral communication.
• Strong documentation skills.

Responsibilities

• Provide leadership and oversight for maintaining and updating System Security Plans (SSPs).
• Lead and coordinate the Authority to Operate (ATO) renewal process.
• Ensure all applications maintain a valid ATO on a three-year cycle.
• Reviews and informs management on security risk assessment results.
• Develops new reports for management based on collected metrics.
• Address and track Plans of Action & Milestones (POA&Ms) and other compliance requirements.
• Provide senior-level support across multiple business areas with standardized security plan updates.
• Analyze existing compliance documentation, identify gaps or risks, and guide corrective actions.
• Coordinate cross-functional collaboration to ensure SSP and ATO artifacts are completed.
• Oversee review, updates, and remediation of security controls.
• Lead efforts to identify procedural gaps during renewal cycles.
• Contribute to enterprise security governance and drive timely completion of compliance activities.
• Leads mid to high-level Incident Responses when working to resolve incidents.
• Serves as the Incident response specialist for cyber event detection, correlation, response, and recovery.

Skills

Audit evidence for security standards

Cross-functional collaboration

Incident response leadership

Strong written and oral communication

Documentation skills

Liaison between business and IT

NIST framework knowledge

Disaster Recovery planning

Business Continuity planning

Education

Bachelor's degree in cyber security, Information Assurance, Business Analytics, or IT Related Field

Master's degree preferred (Cybersecurity / Information Assurance / IT Leadership / MBA with IT or Security)

Job description

Syntricate is seeking an IT Security Analyst 3 to act as the compliance authority among business partners, technical teams, security groups, and management. You will ensure alignment with State standards, NIST protocols, and enterprise security governance, guiding stakeholders through complex compliance cycles and working with vendors, auditors, and project managers.

Responsibilities include SSP maintenance, ATO renewals, risk assessment reviews, and reporting across multiple agencies.