Senior IT Security & Compliance Analyst – SSP/ATO Lead

Zenfreed, LLC; Town of Lansing (NY); Hybrid; USD 110,000 - 140,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

Job summary

Zenfreed, LLC is seeking a Senior IT Business/Compliance Analyst to serve as a senior resource within the DTMB Agency Services for MDCR, MCSC and MiLEAP. You will provide high-level oversight for SSPs and DRPs, ensuring alignment with NIST and SOM standards, and guide stakeholders through complex compliance cycles.

You will lead ATO renewals, coordinate actions across security groups and business partners, and drive consistent documentation and governance across multiple agencies.

Qualifications

• 5 years of experience providing audit evidence to comply with security standards such as NIST, PCI, HIPAA, FERPA
• Exposure to complex IT web applications in the past 5 years
• Experience leading meetings and producing reports
• Experience liaising between business and IT areas

Responsibilities

• Provide leadership for maintaining and updating System Security Plans (SSPs) aligned with NIST and SOM standards
• Lead the Authority to Operate (ATO) renewal planning and materials
• Ensure valid ATO on a three-year cycle and maintain security controls
• Inform management on security risk assessments and recommended actions
• Develop new management reports from cross-agency metrics
• Track Plans of Action & Milestones (POA&Ms) and ensure timely closure
• Provide senior-level support across MDCR, MCSC & MiLEAP with standardized documentation
• Analyze compliance documentation and guide corrective actions
• Coordinate cross-functional collaboration for SSP and ATO evidence
• Oversee remediation of security controls with stakeholders
• Identify gaps during renewal cycles and apply best practices
• Contribute to enterprise security governance and mentoring
• Lead mid to high-level Incident Responses as needed

Education

Bachelor’s degree in cyber security

Master’s degree preferred

Job description

Zenfreed, LLC is seeking a Senior IT Business/Compliance Analyst to serve as a senior resource within the DTMB Agency Services for MDCR, MCSC and MiLEAP. You will provide high-level oversight for SSPs and DRPs, ensuring alignment with NIST and SOM standards, and guide stakeholders through complex compliance cycles.

You will lead ATO renewals, coordinate actions across security groups and business partners, and drive consistent documentation and governance across multiple agencies.