IT Security Analyst

Job Description

Role: Senior IT Business / Compliance Analyst
Lansing,MI
Hybrid

Key Responsibilities

Compliance & ATO Management: Lead and coordinate the Authority to Operate (ATO) renewal process, managing timelines and preparing required materials to ensure applications maintain a valid ATO on a three-year cycle.
System Security Plans (SSPs): Provide leadership and oversight for maintaining and updating SSPs, ensuring absolute accuracy, completeness, and alignment with enterprise compliance standards and the NIST framework.
Risk & Vulnerability Remediation: Work with stakeholders to track and address Plans of Action & Milestones (POA&Ms). Oversee the review and remediation of security controls, identifying procedural gaps or risks during renewal cycles.
Incident Response: Serve as the incident response specialist for cyber event detection, correlation, response, and recovery, leading mid- to high-level incident responses.
Reporting & Analytics: Review security risk assessment results, advise management on corrective actions, and assess risks for high-level security incidents. Develop comprehensive metrics and trend analysis reports across multiple business areas.
Cross-Functional Leadership: Act as the strategic liaison between IT, business units, auditors, vendors, and project managers to gather required evidence and artifacts for compliance processes.
Governance: Contribute to enterprise security governance by standardizing documentation, maintaining accurate records, and mentoring cross-functional team members on security best practices.

Required Skills & Qualifications

Experience (Minimum 5 Years Required in the Following):

Providing audit evidence and ensuring compliance with major security standards (NIST, PCI, HIPAA, FERPA).
Working with and analyzing complex IT web applications (must be within the last 5 years).
Serving as a liaison between distinct business units and technical IT departments.
Leading high-stakes meetings and delivering comprehensive oral and written reports to management.