IT Security Analyst :: Lansing, MI (Hybrid)

Seeking for a Senior IT Business/Compliance Analyst to provide high-level oversight and strategic direction for System Security Plans (SSPs) and Disaster Recovery Plans (DRPs). This role acts as a compliance authority, ensuring alignment with standards and enterprise security governance., * Lead and maintain System Security Plans (SSPs) with accuracy and compliance to NIST protocols.

• Coordinate Authority to Operate (ATO) renewal processes, ensuring continuous compliance.
• Review security risk assessments and recommend corrective actions.
• Develop management reports and conduct trend analysis.
• Track and address compliance requirements, ensuring timely reporting and closure.
• Analyze compliance documentation, identify gaps, and guide corrective actions.
• Collaborate with technical teams and stakeholders for SSP and ATO processes.
• Oversee security controls review and remediation.
• Lead incident response efforts and serve as a specialist for cyber event detection and recovery.

Security Analysis, Computer Security, Enterprise Protection, Strategic Planning, Computer Security, Business Analysis, Disaster Recovery, U.S. National Institute of Standards and Technology (NIST), Systems Maintenance, Maintain Compliance, * Bachelor’s degree in Cybersecurity, Information Assurance, or IT-related field (or 5 years of experience).

• Knowledge of NIST Framework and Controls.
• Strong written and oral communication skills.
• Ability to collaborate cross-functionally., * Governance, Risk, and Compliance (GRC) - 3 years (Keylight preferred).
• Experience with security standards such as NIST, PCI, HIPPA, FERPA - 5 years.
• Exposure to complex IT web applications - 5 years.
• Experience leading meetings and reporting - 5 years.
• Experience as a liaison between business and IT areas - 5 years.