Senior IT Security & Compliance Lead

IO Datasphere, Inc.; Lansing (MI); Hybrid; USD 90,000 - 130,000; Full time

Job summary

Michigan Department of Technology, Management and Budget (DTMB) is seeking a Senior IT Security Compliance Analyst in Lansing, MI. The role provides high-level oversight, guidance, and strategic direction for SSPs and DRPs, aligning with NIST standards and DTMB governance.

The analyst serves as the compliance authority among business partners, technical teams, security groups, and management, guiding complex compliance cycles.

Qualifications

• 5 years - Experience providing audit evidence to comply with security standards such as NIST, PCI, HIPAA, FERPA
• Experience leading meetings and producing written/oral reports
• Experience liaising between business and IT areas
• Knowledge of NIST Framework and Controls
• Bachelor's degree in cybersecurity, Information Assurance, Business Analytics, or IT Related Field or 5 years of experience

Responsibilities

• Provide leadership for maintaining System Security Plans (SSPs) and Disaster Recovery Plans (DRPs).
• Lead Authority to Operate (ATO) renewal planning and materials.
• Ensure ATO validity on a three-year cycle and lead remediation of controls.
• Review risk assessments and recommend corrective actions.
• Develop reports from metrics across agencies and perform trend analysis.
• Address Plans of Action & Milestones (POA&Ms) and ensure timely closure.
• Mentor team members and drive timely compliance activities.
• Coordinate cross-functional collaboration to gather SSP and ATO evidence.
• Oversee remediation of security controls with stakeholders.

Skills

NIST audits

Security governance

Incident response

Cross-functional liaison

Communication

Education

Bachelor's in cybersecurity or IT

Master's in cybersecurity or IT leadership

Job description

Michigan Department of Technology, Management and Budget (DTMB) is seeking a Senior IT Security Compliance Analyst in Lansing, MI. The role provides high-level oversight, guidance, and strategic direction for SSPs and DRPs, aligning with NIST standards and DTMB governance.

The analyst serves as the compliance authority among business partners, technical teams, security groups, and management, guiding complex compliance cycles.