IT Security Analyst

Job Summary — IT Security Analyst 3

• Serve as a senior IT Business/Compliance Analyst within the Department of Technology, Management and Budget (DTMB) for multiple Michigan state agencies (MDCR, MCSC, MiLEAP).
• Provide oversight and leadership for maintaining, updating, and ensuring accuracy of System Security Plans (SSPs) and Disaster Recovery Plans (DRPs).
• Act as compliance authority and liaison among business partners, technical teams, security groups, and management.
• Ensure all requirements, processes, and documentation align with State of Michigan standards, NIST protocols, and enterprise security governance.
• Lead and coordinate the Authority to Operate (ATO) renewal process for applications, ensuring continuous compliance and approval.
• Review and assess security risk assessments, develop and recommend corrective actions, and inform management of outcomes.
• Support and guide stakeholders through complex compliance cycles, driving consistency and best practices across application areas.
• Manage and track Plans of Action & Milestones (POA&Ms), ensuring timely closure and compliance with all regulatory requirements.
• Analyze and identify gaps in compliance documentation and implement corrective actions as needed.
• Facilitate cross-functional collaboration to ensure required evidence and artifacts for SSP and ATO processes are completed and maintained.
• Oversee review, remediation, and updates of security controls in cooperation with stakeholders.
• Lead incident response activities for mid to high-level security incidents, including detection, correlation, response, and recovery.
• Mentor team members, contribute to enterprise security governance, and drive timely completion of compliance activities.