Senior Security & Compliance Analyst (NIST/ATO Lead)

InfoStride; Lansing (MI); Hybrid; USD 90,000 - 120,000; Full time

Job summary

DTMB Agency Services for MDCR, MCSC and MiLEAP seeks a Senior IT Business/Compliance Analyst to oversee SSPs and DRPs, guiding compliance with NIST and SOM standards. This role coordinates with business, security teams, and auditors to ensure complete evidence and alignment across agencies.

The Senior Analyst acts as a liaison among stakeholders, ensuring processes and documentation meet regulatory requirements, and collaborates with vendors, project managers, and analysts throughout renewal

Qualifications

• Bachelor’s degree in cyber security, Information Assurance, Business Analytics, or IT related field or 5 years of experience.
• Advanced degrees (MS in Cybersecurity/ISA, IT Leadership, or MBA with IT/Security) preferred.
• Educational or professional knowledge of NIST Framework and Controls required.
• Strong written and oral communication abilities.
• Ability to collaborate cross-functionally.

Responsibilities

• Provide leadership and oversight for maintaining and updating SSPs in line with NIST and SOM standards.
• Lead ATO renewal planning, materials, timelines, and ongoing compliance for supported applications.
• Ensure applications maintain a valid ATO on a 3-year cycle and update controls accordingly.
• Review security risk assessments and recommend corrective actions.
• Assess risks for high-level security incidents and develop management reports.
• Track POA&Ms and other compliance requirements with timely reporting.
• Provide senior-level support across MDCR, MCSC & MiLEAP focusing on standardized updates.
• Analyze existing compliance documentation, identify gaps, and guide corrective actions.
• Coordinate cross-functional collaboration to complete SSP and ATO artifacts.
• Oversee remediation of security controls and ensure issues are resolved with stakeholders.
• Identify procedural gaps during renewal cycles and apply best practices.
• Contribute to enterprise security governance and mentor team members.
• Lead mid-to-high level Incident Responses and act as incident response specialist.

Skills

NIST/PCI/HIPAA

Complex IT Apps

Meeting leadership

Business-IT liaison

Education

Bachelor's in Cybersecurity/Info Assurance/IT

Advanced degree preferred

NIST knowledge

Strong communication

Cross-functional collaboration

Job description

DTMB Agency Services for MDCR, MCSC and MiLEAP seeks a Senior IT Business/Compliance Analyst to oversee SSPs and DRPs, guiding compliance with NIST and SOM standards. This role coordinates with business, security teams, and auditors to ensure complete evidence and alignment across agencies.

The Senior Analyst acts as a liaison among stakeholders, ensuring processes and documentation meet regulatory requirements, and collaborates with vendors, project managers, and analysts throughout renewal