Senior IT Security & Compliance Analyst (Hybrid)

Dia Software Solutions; Town of Lansing (NY); Hybrid; USD 110,000 - 150,000; Full time

Job summary

DIA SOFTWARE SOLUTIONS LLC is seeking a Senior IT Security Analyst to support the Michigan state agencies by maintaining SSPs/DRPs, guiding compliance with NIST and SOM standards, and coordinating ATO renewals.

The role requires strong communication, cross-functional collaboration, and the ability to translate complex security requirements into actionable controls across MDCR, MCSC, and MiLEAP.

Qualifications

• Bachelor's degree in cyber security, Information Assurance, Business Analytics, or IT related field.
• 5 years of experience
• Advanced degrees preferred (Master's in Cybersecurity, Information Assurance, Information Systems / IT Leadership, or MBA with IT/Security concentration)
• Knowledge of NIST Framework and Controls
• Strong written & oral communication
• Strong documentation skills
• Cross-functional collaboration

Responsibilities

• Maintain and update System Security Plans (SSPs) aligned with NIST and SOM standards.
• Lead Authority to Operate (ATO) renewal planning and materials, timelines and approvals.
• Ensure all applications have a valid ATO on a 3-year cycle and maintain security controls.
• Review risk assessments and recommend corrective actions.
• Develop reports and perform trend analysis across agencies.
• Coordinate Plans of Action & Milestones (POA&M) tracking and closure.
• Provide senior-level support across MDCR, MCSC and MiLEAP.
• Identify gaps in compliance and guide corrective actions.
• Ensure evidence for SSP and ATO processes is complete across teams.
• Lead incident response activities as needed.

Skills

Audit evidence

NIST

Security governance

Incident response

Communication

Education

Bachelor's degree in cyber security

Master's degree preferred

Job description

DIA SOFTWARE SOLUTIONS LLC is seeking a Senior IT Security Analyst to support the Michigan state agencies by maintaining SSPs/DRPs, guiding compliance with NIST and SOM standards, and coordinating ATO renewals.

The role requires strong communication, cross-functional collaboration, and the ability to translate complex security requirements into actionable controls across MDCR, MCSC, and MiLEAP.