Full Job Description
We are looking for an experienced IT Security Analyst 3 with strong expertise in Governance, Risk & Compliance (GRC), NIST security frameworks, System Security Plans (SSPs), and Authority to Operate (ATO) processes.
The ideal candidate will provide senior-level compliance oversight, coordinate security assessments, maintain disaster recovery documentation, and work closely with business stakeholders, technical teams, auditors, and security leadership.
Key Responsibilities:
- Lead the creation, review, and maintenance of System Security Plans (SSPs) in alignment with NIST and organizational security standards.
- Coordinate Authority to Operate (ATO) renewals and ensure continuous compliance.
- Maintain and update Disaster Recovery Plans (DRPs).
- Review security risk assessments and recommend corrective actions.
- Manage Plans of Action & Milestones (POA&Ms) and track remediation activities.
- Coordinate audit evidence collection and compliance documentation.
- Collaborate with business stakeholders, IT teams, vendors, auditors, and management.
- Identify security control gaps and drive remediation efforts.
- Develop security reports, perform trend analysis, and communicate findings to management.
- Support cybersecurity incident response, detection, investigation, and recovery.
Qualifications
- 5+ years of IT security, compliance, or business analysis experience.
- 3+ years of Governance, Risk & Compliance (GRC) experience.
- 5 years of experience providing audit evidence for security standards such as NIST, PCI, HIPAA, and FERPA.
- Experience with complex IT web applications within the past 5 years.
- Strong experience leading meetings and preparing written and oral reports.
- Experience acting as a liaison between business and IT teams.
- Strong knowledge of NIST frameworks and security controls.
Highly Desired Skills:
- Experience creating Disaster Recovery Plans, Business Continuity Plans, and Incident Response Plans.
- Experience preparing supporting documentation for IT system audits.
- Keylight experience (strongly preferred).
Additional Information
- Candidates must currently reside within 90 miles of Lansing, MI.
- Must be available to work onsite two days per week starting Day 1.
- Local candidates only.
Interested candidates: Please share your updated resume along with current location and contact details.
