Senior IT Security & Compliance Lead

Morph Enterprise; Lansing (MI); On-site; USD 90,000 - 130,000; Full time

Job summary

Morph Enterprise in Lansing, MI seeks an IT Security Analyst 3 to drive governance, risk and compliance activities and act as a liaison among business partners and security teams. The role emphasizes NIST-aligned processes, SSP maintenance, and ATO renewal leadership.

The Senior Analyst collaborates with vendors, auditors, project managers, and analysts to ensure enterprise security governance. Strong communication and documentation skills are essential for successful stewardship across

Qualifications

• 3+ years of governance, risk and compliance (GRC) experience.
• Experience providing audit evidence to comply with NIST, PCI, HIPAA, FERPA.
• Exposure to complex IT web applications in the last 5 years.
• Strong written and oral communication; cross-functional collaboration.

Responsibilities

• Provide leadership for maintaining SSPs and ensuring alignment with NIST and SOM.
• Lead ATO renewal planning, materials, timelines and approvals.
• Ensure applications maintain a valid ATO on a 3-year cycle and oversee controls.
• Review security risks and recommend corrective actions.
• Develop reports and conduct trend analysis across agencies.
• Address POA&M items and ensure timely reporting and closure.
• Provide senior support across multiple business areas (MDCR, MCSC, MiLEAP).
• Guide corrective actions to meet regulatory and organizational requirements.
• Coordinate cross-functional collaboration to complete SSP and ATO artifacts.
• Oversee remediation of security controls and communicate issues.
• Identify gaps during renewal cycles and apply best practices.
• Mentor team members and drive timely compliance activities.
• Lead mid to high-level Incident Responses and cyber event handling.

Skills

GRC

NIST/PCI/HIPAA

Web apps risk

Leadership meetings

Business-IT liaison

Education

Bachelor's in Cyber Security

Master's in Cybersecurity / IT Leadership

Job description

Morph Enterprise in Lansing, MI seeks an IT Security Analyst 3 to drive governance, risk and compliance activities and act as a liaison among business partners and security teams. The role emphasizes NIST-aligned processes, SSP maintenance, and ATO renewal leadership.

The Senior Analyst collaborates with vendors, auditors, project managers, and analysts to ensure enterprise security governance. Strong communication and documentation skills are essential for successful stewardship across