Senior IT Security & Compliance Lead (SSP/ATO)

CCS Global Tech; Dimondale (MI); On-site; USD 90,000 - 130,000; Full time

Job summary

CCS Global Tech, a rapidly growing IT firm in Michigan, seeks a Senior Cybersecurity Compliance Lead to oversee SSPs, ATO renewals, and security risk management. You will ensure three-year cycle compliance, coordinate with multiple agencies, and provide senior-level support across MDCR, MCSC, and MiLEAP programs.

Strong communication and cross-functional collaboration are essential. The role focuses on governance, risk, and compliance with hands-on experience in incident response and security

Qualifications

• Bachelor’s degree or 5 years of relevant experience.
• Knowledge of NIST framework and controls is required.
• Excellent written and oral communication skills.
• Ability to collaborate cross-functionally.
• Strong documentation skills.
• Experience providing audit evidence to security standards (NIST, PCI, HIPAA, FERPA).
• Exposure to complex IT web applications (past 5 years).
• Experience leading meetings and producing reports (5 years).
• Experience liaising between business and IT areas (5 years).
• GRC experience (3 years).

Responsibilities

• Maintain and update System Security Plans (SSPs) and ensure alignment with NIST and SOM compliance.
• Lead Authority to Operate (ATO) renewal processes and ensure three-year cycle compliance.
• Ensure ATO validity and update security controls during renewals.
• Inform management on risk assessments and recommend corrective actions.
• Develop reports and conduct trend analysis across agencies.
• Track and close Plans of Action & Milestones (POA&Ms) and other requirements.
• Provide senior-level support across multiple business areas.
• Identify gaps in compliance documentation and guide corrective actions.
• Coordinate cross-functional collaboration to complete SSP/ATO evidence.
• Oversee remediation of security controls and keep stakeholders informed.
• Identify procedural gaps and best-practice updates during renewals.
• Contribute to enterprise security governance, mentoring, and timely compliance.
• Lead mid to high-level incident responses and serve as Incident Response specialist.

Skills

Cybersecurity

NIST Framework

Written & Verbal Communication

Cross-functional Collaboration

Documentation

Audit Evidence & Standards (NIST/PCI/H

Stakeholder Liaison

GRC

Incident Response Leadership

Incident Response

Education

Bachelor’s degree in cyber security

Information Assurance

Business Analytics

IT Related Field

5 years experience (alternative)

Job description

CCS Global Tech, a rapidly growing IT firm in Michigan, seeks a Senior Cybersecurity Compliance Lead to oversee SSPs, ATO renewals, and security risk management. You will ensure three-year cycle compliance, coordinate with multiple agencies, and provide senior-level support across MDCR, MCSC, and MiLEAP programs.

Strong communication and cross-functional collaboration are essential. The role focuses on governance, risk, and compliance with hands-on experience in incident response and security