Senior IT Security & Compliance Lead

IO Datasphere, Inc.; Lansing (MI); Hybrid; USD 90,000 - 130,000; Full time

Job summary

The Michigan Department of Technology, Management and Budget (DTMB) seeks a Senior IT Security Compliance Analyst to provide high-level oversight, guidance, and strategic direction for SSPs and DRPs. This role acts as the compliance authority among business partners, technical teams, security groups, and management, ensuring alignment with NIST standards and enterprise governance.

Responsibilities include leading ATO renewal efforts, maintaining three-year cycle compliance, identifying gaps,

Qualifications

• Strong written and oral communication.
• Ability to collaborate cross-functionally.

Responsibilities

• Provide leadership and oversight for SSPs and DRPs, ensuring alignment with NIST standards and client requirements.
• Lead and coordinate the ATO renewal process, planning materials, managing timelines and ensuring ongoing compliance.
• Ensure applications maintain a valid ATO on a three-year cycle and address remediation during renewals.
• Review security risk assessment results and recommend corrective actions as needed.
• Develop reports and conduct trend analysis across multiple agencies using collected metrics.
• Coordinate Plans of Action & Milestones (POA&Ms) and other compliance requirements with stakeholders for timely reporting and closure.
• Mentor team members and drive timely completion of compliance activities across enterprise.
• Lead incident response efforts and act as incident response specialist for cyber event detection, correlation, response, and recovery.

Skills

NIST, PCI, HIPAA, FERPA audit evidence

Complex IT web applications

Leading meetings & reports

Liaison between business & IT

NIST Framework & Controls knowledge

Education

Bachelor's degree in cybersecurity / IT-related field

Job description

The Michigan Department of Technology, Management and Budget (DTMB) seeks a Senior IT Security Compliance Analyst to provide high-level oversight, guidance, and strategic direction for SSPs and DRPs. This role acts as the compliance authority among business partners, technical teams, security groups, and management, ensuring alignment with NIST standards and enterprise governance.

Responsibilities include leading ATO renewal efforts, maintaining three-year cycle compliance, identifying gaps,