Senior Security Compliance Analyst — NIST/ATO (Hybrid)

HTC Global; Lansing (MI); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Hybrid work option

Health benefits

401(k) matching

Paid time off

Professional development

Job summary

HTC Global Services is seeking a Senior IT Security Compliance Analyst to provide high-level oversight of SSPs, ATO renewals, and security controls aligned with NIST protocols. The role acts as a liaison across business, security, auditors, and IT teams to ensure enterprise-wide governance and continuous compliance.

Responsibilities include leading ATO renewals, maintaining three-year cycle validations, and driving remediation of gaps.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Assurance, Business Analytics, or an IT-related field, OR 5 years of experience.
• Educational or professional knowledge of the NIST Framework and Controls.
• 5 years of experience providing audit evidence to comply with NIST/PCI/HIPAA/FERPA.
• 5 years of experience with complex IT web applications within the past 5 years.
• Strong written and oral communication skills.
• Ability to collaborate cross-functionally.

Responsibilities

• Maintain System Security Plans (SSPs) and controls aligned with NIST requirements.
• Lead ATO renewal planning, materials, timelines, and approvals.
• Ensure ATO validity on a 3-year cycle and maintain controls.
• Assess risks and report on security incidents and trends.
• Coordinate with stakeholders to address POA&M and compliance gaps.

Skills

Strong written and verbal comms

Cross-functional collaboration

Leadership & facilitation

Incident response coordination

NIST familiarity

Education

Bachelor’s in Cybersecurity/IT

Master’s in Cybersecurity/IT Leadership

Job description

HTC Global Services is seeking a Senior IT Security Compliance Analyst to provide high-level oversight of SSPs, ATO renewals, and security controls aligned with NIST protocols. The role acts as a liaison across business, security, auditors, and IT teams to ensure enterprise-wide governance and continuous compliance.

Responsibilities include leading ATO renewals, maintaining three-year cycle validations, and driving remediation of gaps.