IT Security Analyst :: Lansing, MI
Duration: 12+ months | Hybrid
Seeking for a Senior IT Business/Compliance Analyst to provide high-level oversight and strategic direction for System Security Plans (SSPs) and Disaster Recovery Plans (DRPs). This role acts as a compliance authority, ensuring alignment with standards and enterprise security governance.
Job Responsibilities:
- Lead and maintain System Security Plans (SSPs) with accuracy and compliance to NIST protocols.
- Coordinate Authority to Operate (ATO) renewal processes, ensuring continuous compliance.
- Review security risk assessments and recommend corrective actions.
- Develop management reports and conduct trend analysis.
- Track and address compliance requirements, ensuring timely reporting and closure.
- Analyze compliance documentation, identify gaps, and guide corrective actions.
- Collaborate with technical teams and stakeholders for SSP and ATO processes.
- Oversee security controls review and remediation.
- Lead incident response efforts and serve as a specialist for cyber event detection and recovery.
Job Qualifications:
- Bachelor's degree in Cybersecurity, Information Assurance, or IT-related field (or 5 years of experience).
- Knowledge of NIST Framework and Controls.
- Strong written and oral communication skills.
- Ability to collaborate cross-functionally.
Skills:
- Governance, Risk, and Compliance (GRC) - 3 years (Keylight preferred).
- Experience with security standards such as NIST, PCI, HIPPA, FERPA - 5 years.
- Exposure to complex IT web applications - 5 years.
- Experience leading meetings and reporting - 5 years.
- Experience as a liaison between business and IT areas - 5 years.