Req: IT Security Analyst in Lansing MI Hybrid

The State of Michigan is seeking an IT Security Analyst 2 to support the Michigan Department of Transportation (MDOT). The selected candidate will be responsible for developing, maintaining, and validating System Security Plans (SSPs), supporting Authority to Operate (ATO) activities, conducting risk assessments, and ensuring compliance with NIST security standards. This role requires close collaboration with project teams, business stakeholders, and cybersecurity teams to strengthen the security posture of enterprise applications. Key Responsibilities

• Create and maintain System Security Plans (SSPs) for new and existing applications.
• Support Authority to Operate (ATO) processes and security compliance activities.
• Collaborate with system owners, project teams, and security stakeholders to implement security controls.
• Conduct security risk assessments and recommend remediation plans.
• Validate compliance with NIST security controls and state security standards.
• Coordinate security testing, vulnerability scanning, and remediation efforts.
• Monitor Plans of Action & Milestones (POA&M) and corrective action plans.
• Lead system data classification activities as part of SSP/ATO processes.
• Prepare security documentation and provide recommendations to improve security posture.
• Work with vendors and technical teams to collect security artifacts required for assessments.

• 1-3 years of experience in Information Security, Cybersecurity, or a related field.
• Knowledge of NIST, System Security Plans (SSP), Governance, Risk & Compliance (GRC), and security assessment processes.
• Strong written and verbal communication skills.
• Excellent customer service and stakeholder collaboration abilities.
• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or related field OR a valid Cybersecurity certification.

Preferred Qualifications

• Experience with Keylight GRC.
• Experience supporting SSP, ATO, and compliance initiatives.
• Familiarity with vulnerability management and security testing.
• Experience working in government or public sector environments.