Senior IT Security & Compliance Lead - NIST/ATO

The Stafford Gray Group; Lansing (MI); On-site; USD 90,000 - 120,000; Full time

Job summary

The Stafford Gray Group is seeking a Senior IT Security Compliance Analyst to lead security planning and authorization for a portfolio of public-sector applications. You’ll own SSP updates, guide systems through Authority to Operate (ATO) renewals, and ensure controls and documentation align with NIST standards.

In this senior, hands-on role, you’ll mentor other analysts and collaborate with business owners, IT teams, auditors, and project managers to sustain compliance and improve security

Qualifications

• 5 years providing audit evidence to comply with security standards such as NIST, PCI, HIPAA or FERPA.
• 5 years of exposure to complex IT web applications.
• 5 years leading meetings and delivering oral and written reports.
• 5 years working as a liaison between business and IT areas.
• Strong working knowledge of the NIST framework and controls.
• Strong writing and documentation skills.
• Bachelor’s degree in cybersecurity, information assurance, business analytics or an IT-related field, or 5 years of equivalent experience.

Responsibilities

• Lead the maintenance and updating of System Security Plans (SSPs) aligned with NIST controls.
• Plan and run the ATO renewal process on a three-year cycle from materials through approval.
• Validate and maintain security controls and oversee remediation of gaps.
• Track Plans of Action & Milestones (POA&Ms) through closure with stakeholders.
• Review risk assessment results and brief management with corrective actions.
• Develop metrics-based reports and trend analyses for multiple business areas.
• Create and maintain Disaster Recovery Plans and contribute to business continuity planning.
• Find gaps in compliance documentation and drive consistent practices across systems.
• Coordinate with technical teams, business owners and security staff to keep SSP/ATO artifacts complete and current.

Skills

NIST controls

Documentation

Stakeholder liaison

Audit evidence

IT security

Education

Bachelor’s degree in cybersecurity/IT

Job description

The Stafford Gray Group is seeking a Senior IT Security Compliance Analyst to lead security planning and authorization for a portfolio of public-sector applications. You’ll own SSP updates, guide systems through Authority to Operate (ATO) renewals, and ensure controls and documentation align with NIST standards.

In this senior, hands-on role, you’ll mentor other analysts and collaborate with business owners, IT teams, auditors, and project managers to sustain compliance and improve security