Senior IT Security & Compliance Lead (ATO/NIST)

Stafford Gray; Lansing (MI); On-site; USD 95,000 - 130,000; Full time

Job summary

Stafford Gray is seeking a Senior IT Security Compliance Analyst for a contract role with a public-sector client in the Lansing area. You’ll lead the compliance program for agency applications, owning SSPs and ATO renewals, and coordinating with auditors and technical teams.

You’ll mentor staff, drive standardized processes, and report on security metrics while partnering with business and IT stakeholders to close gaps.

Qualifications

• 3+ years in Governance, Risk & Compliance (GRC).
• 5+ years providing audit evidence for NIST, PCI, HIPAA, or FERPA.
• Knowledge of the NIST framework and controls.
• 5+ years exposure to complex IT web applications.
• 5+ years leading meetings and delivering reports.
• 5+ years liaising between business and IT areas.
• Bachelor’s degree in cybersecurity, information assurance, IT, or related field, or 5 years equivalent.
• Strong documentation and communication skills.

Responsibilities

• Lead the maintenance and updating of SSPs so they’re accurate and aligned with NIST controls.
• Plan and run the ATO renewal process on a three-year cycle with timely materials.
• Track POA&Ms and compliance items through reporting and closure.
• Review security risk results, brief management, and recommend actions.
• Assess risk of incidents and lead mid- to high-level incident response.
• Build reporting and trend analysis from security metrics across areas.
• Review compliance docs, identify gaps and guide fixes.
• Coordinate SSP/ATO evidence with teams, owners, vendors, auditors, and leadership.
• Mentor team members and push for standardized compliance processes.

Skills

GRC experience

Stakeholder liaison

Auditing

Policy documentation

NIST controls

Education

Bachelor's degree in cybersecurity, information assurance, IT, or related field

Job description

Stafford Gray is seeking a Senior IT Security Compliance Analyst for a contract role with a public-sector client in the Lansing area. You’ll lead the compliance program for agency applications, owning SSPs and ATO renewals, and coordinating with auditors and technical teams.

You’ll mentor staff, drive standardized processes, and report on security metrics while partnering with business and IT stakeholders to close gaps.