Senior IT Security Compliance Analyst (SSP/ATO)

Robotics Technologies LLC; Dallas (TX); On-site; USD 90,000 - 120,000; Full time

Job summary

The State of Michigan is seeking an experienced IT Security Analyst 3 to support security compliance, governance, and risk management across MDCR, MCSC, and MiLEAP applications. This resource will serve as a senior compliance analyst and liaison between business stakeholders, technical teams, security groups, management, vendors, and auditors.

The primary focus is maintaining and updating System Security Plans (SSPs), coordinating Authority to Operate (ATO) renewals, managing security controls,

Responsibilities

• Lead the preparation, maintenance, and updating of System Security Plans (SSPs).
• Coordinate Authority to Operate (ATO) renewal activities, including documentation, timelines, approvals, and compliance tracking.
• Ensure applications maintain valid ATO approvals on the required three-year cycle.
• Review security risk assessments and recommend corrective actions to management.
• Identify compliance gaps, security risks, and control deficiencies.
• Manage and track Plans of Action and Milestones (POA&Ms) through resolution.
• Coordinate with business owners, technical teams, enterprise security groups, vendors, auditors, and project managers.
• Collect, review, and maintain security evidence and artifacts required for SSP and ATO processes.
• Oversee security control reviews, updates, remediation, and compliance reporting.
• Develop management reports, analyze security metrics, and identify trends across supported agencies.
• Lead and coordinate compliance activities across MDCR, MCSC, and MiLEAP.
• Support incident response activities, including cyber event detection, correlation, response, and recovery.
• Maintain accurate compliance documentation and records.
• Provide guidance to stakeholders and support consistent security governance practices.

Job description

The State of Michigan is seeking an experienced IT Security Analyst 3 to support security compliance, governance, and risk management across MDCR, MCSC, and MiLEAP applications. This resource will serve as a senior compliance analyst and liaison between business stakeholders, technical teams, security groups, management, vendors, and auditors.

The primary focus is maintaining and updating System Security Plans (SSPs), coordinating Authority to Operate (ATO) renewals, managing security controls,