> Markdown version of [/jobs/ext/2558506-it-security-analyst-2](https://www.wearedevelopers.com/jobs/ext/2558506-it-security-analyst-2). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Security Analyst 2 - **Company:** Aroha Technologies - **Location:** Lansing, MI, United States - **Experience:** Experienced - **Contract:** Temporary to permanent - **Skills:** Cyber Security, Information Systems, Computer Programming, Software Deployment, Software Engineering, Data Classification, Software Security, Information Technology, Plan of Action and Milestones - **Published:** August 3, 2026 - **Apply:** https://www.dice.com/job-detail/9a4bfda6-7413-4479-a3d4-7105e0d4d444 ## About the Role Candidates MUST have either: * A Bachelor's degree or higher specific to IT, or * A Cyber Security certification. Official transcripts or Cyber Security certification must be attached. Pre-screening questions are required and must be completed by the candidate and included with the submission. A standard cover letter summarizing the candidate's qualifications and experience related to the position is required and must be attached with the submission. Top Skills & Years of Experience * 1 3 years of experience in the field or a related area. * Knowledge of commonly used concepts, practices, and procedures (NIST, SSP, GRC, etc.). * Experience with Keylight is a plus. * Strong communication and customer service skills. * Candidates MUST have either a Bachelor's degree or higher specific to IT or a Cyber Security certification (official transcripts or certificate required). * Clear and concise written and verbal communication skills., * 1 3 years of experience in the field or a related area. * Knowledge of commonly used concepts, practices, and procedures within IT Security. * Bachelor's degree or higher with qualifying coursework in Computer Science, Information Systems, Networking, Programming, Mathematics, or related fields. * OR Associate's degree with qualifying coursework plus at least two years of related IT experience. * OR High School Diploma (or equivalent) plus three years of relevant IT experience. * OR IT Certification. ## Description The Compliance Analyst is responsible for completing and maintaining System Security Plans (SSPs) for new and existing systems. SSPs are documented within a Governance, Risk, and Compliance (GRC) tool. This role requires close coordination with IT project teams, technical leads, business representatives, enterprise security representatives, and product owners to establish and maintain security processes and controls, identify security vulnerabilities, and coordinate remediation plans. Compliance Analysts support development projects and assist with Authority to Operate (ATO) activities during Commercial Off-the-Shelf (COTS) implementation projects to meet security requirements before production deployment. Responsibilities * Create System Security Plans (SSPs) in collaboration with Automation Managers, System Owners, System Security Administrators, and project teams following the Secure Application Development Life Cycle and Security Accreditation Process. * Maintain SSPs for existing applications requiring Authority to Operate (ATO) and system enhancements. * Collaborate with business representatives to establish system registration. * Lead security testing and system scanning activities. * Perform risk assessments and provide security control responses. * Monitor Plans of Action & Milestones (POA&M) and Corrective Action Plans related to SSPs. * Validate SSPs to ensure compliance with NIST security controls. * Develop recommendations to improve security posture in accordance with security policies, standards, procedures, and NIST controls. * Lead team members and vendors in collecting required assessment artifacts. * Coordinate scanning and enterprise security activities with security teams, technical leads, and business areas. * Lead system Data Classification activities within the SSP/ATO process. ## Related Videos - [Software Security 101: Secure Coding Basics](https://www.wearedevelopers.com/videos/220-software-security-101-secure-coding-basics) - [Microservices? Monoliths? An Annoying Discussion!](https://www.wearedevelopers.com/videos/970-microservices-monoliths-an-annoying-discussion) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Unleashing the Power of Developers: Why Cybersecurity is the Missing Piece?!?](https://www.wearedevelopers.com/videos/712-unleashing-the-power-of-developers-why-cybersecurity-is-the-missing-piece) - [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [How should you format your IT resume?](https://www.wearedevelopers.com/magazine/68-how-should-you-format-your-it-resume) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know) - [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)