IT Security Analyst

We are looking for an IT Security Analyst 2 to join our team!

Location & Work Arrangement

• Location: Lansing, MI (Local candidates within 100 miles)
• Work Arrangement: Hybrid (2 days/week required onsite: Tuesdays & Wednesdays)

Role Overview

As a Compliance Analyst, you will build and maintain System Security Plans (SSPs) using Governance, Risk, and Compliance (GRC) tools. You'll work closely with IT project teams and security leaders to identify vulnerabilities, validate NIST controls, and lead applications through the Authority to Operate (ATO) process.

Key Responsibilities & Crux of the Role

• System Security Plans (SSP): Draft, update, and maintain SSPs for critical IT applications.
• Risk & Compliance: Conduct risk assessments, track remediation plans, and align systems with NIST security controls.
• Security Testing & Scans: Lead vulnerability scanning, data classification, and mitigation tracking.
• Collaboration: Coordinate security requirements with cross-functional technical teams and vendors.

Required Skills & Qualifications

• Experience: 1 3 years in IT Security, Compliance, or a related cybersecurity role.
• Core Standards: Strong working knowledge of NIST, SSP, and GRC concepts.
• Education / Certification (Must meet ONE):
  • Bachelor's/Associate's degree in IT/Computer Science, OR
  • Active Cybersecurity Certification (e.g., Security+, CISSP, CISA, etc.), OR
  • Equivalent technical work experience.
• Communication: Clear verbal and written skills to translate complex security concepts to stakeholders.

Bonus Skills

• Hands-on experience with Keylight (GRC tool).

Interview Process

• Virtual Interview: MS Teams video call (Laptop required; screen-sharing may be requested).
• Next Steps: Potential 2nd-round in-person interview.

Quick Skill Matrix Summary

Skill	Requirement	Ideal Experience
IT / Cyber Experience	Required	1 3 Years
NIST, SSP, & GRC Concepts	Required	Core Understanding
IT Degree OR Cyber Certification	Required	Transcripts / Cert attached
Keylight (GRC Tool)	Preferred	Nice to have
Hybrid Availability (Tues/Wed Onsite)	Required	Day 1 Availability