Senior Security & Compliance Analyst, Public Sector - Hybrid

Morph Enterprise; Lansing (MI); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Morph Enterprise is seeking a Security & Compliance Analyst to support the integrity, security, and compliance of retirement benefits systems for public sector programs in Michigan. You will collaborate with cross‑departmental teams to ensure adherence to state regulations and governance requirements, and to strengthen controls across technology and processes.

The role emphasizes DRP/BCP, vulnerability management, and documentation, with a 1‑year term and a hybrid work arrangement requiring

Qualifications

• Seven years of experience in security, compliance, risk management, or closely related discipline within government/public retirement system or regulated financial environment.
• Experience developing, documenting, and evaluating security controls, compliance requirements, and governance processes.
• Experience supporting security or compliance assessments, audit activities, policy reviews, and control validations.
• Working knowledge of security and compliance frameworks relevant to public sector environments, such as NIST CSF, NIST 800 53, and state IT security standards.
• Experience participating in system or process changes with focus on data protection, access controls, regulatory adherence, and secure implementation.
• Knowledge of Agile SDLC practices with emphasis on integrating security into requirements, testing, and release processes.
• Ability to assess common vulnerabilities such as XSS, CSRF, SQL Injection, and authentication weaknesses.
• Proficiency in tools to support security documentation, compliance tracking, and workflow management (e.g., Azure DevOps, GRC platforms).
• Contribute to development, documentation, and testing of Disaster Recovery Plans (DRPs) for critical systems.
• Assist in defining recovery time objectives (RTOs) and recovery point objectives (RPOs).

Responsibilities

• Analyze, document, and validate security processes, system requirements, and interagency interactions supporting retirement benefits administration.
• Collaborate with program offices, technical teams, and SMEs to define security and compliance requirements for system enhancements and policy updates.
• Create and maintain audit-ready documentation, including security requirements, user stories, workflows, and use cases aligned with public sector standards.
• Support solution design and participate in testing phases (e.g., UAT) to verify security controls and compliance requirements.
• Recommend improvements that strengthen security posture and improve process efficiency.
• Monitor project deliverables, timelines, and milestones to ensure alignment with security objectives and governance frameworks.
• Assist in developing training materials and delivering security and compliance education to staff and stakeholders.
• Conduct gap analyses and assess impacts of legislative, regulatory, or policy changes on operations and system security.
• Perform data analysis and generate reports to support compliance monitoring and risk tracking.

Skills

NIST CSF

NIST 800-53

Public sector security

Security documentation tools

DRP development

RTO/RPO definition

Agile SDLC security

Data protection

Security auditing

Vulnerability assessment

Education

Bachelor's degree in information security / cybersecurity / information systems / public administration or related field

Tools

Azure DevOps

GRC platforms

Job description

Morph Enterprise is seeking a Security & Compliance Analyst to support the integrity, security, and compliance of retirement benefits systems for public sector programs in Michigan. You will collaborate with cross‑departmental teams to ensure adherence to state regulations and governance requirements, and to strengthen controls across technology and processes.

The role emphasizes DRP/BCP, vulnerability management, and documentation, with a 1‑year term and a hybrid work arrangement requiring