IT Security Analyst

IT Security Analyst role based in Lansing, MI.

About the role

The Compliance Analyst is responsible for completing and maintaining system security plans (SSP) for new and existing systems, documented in the Governance, Risk, and Compliance tool. This role requires close coordination with IT project teams, tech leads, business and enterprise security representatives, and product owners to establish and maintain processes, security controls, and remediation plans for identified vulnerabilities. Compliance Analysts are assigned to DTMB development projects and may consult on Commercial off the Shelf (COTS) procurement projects. For COTS implementation, they navigate SSP/Authority to Operate (ATO) activities with Michigan Cyber Security (MCS) to meet security requirements for Go Live.

Responsibilities

• Create SSPs in collaboration with MDOT Automation Managers, System Owners, System Security Administrators, and project teams for new applications, aligning with the Secure Application Development Life Cycle and Michigan Security Accreditation Process.
• Maintain SSPs for existing applications requiring ATO or undergoing software/hardware enhancements.
• Collaborate with business representatives to establish system registration.
• Lead and identify security testing and system scanning requirements.
• Perform risk assessments and provide responses for security controls.
• Continuously monitor plans of action, milestones, and corrective action plans related to SSPs in collaboration with the MDOT Enterprise Information Management office.
• Validate SSPs to ensure NIST control requirements are met.
• Author recommendations to improve security posture in accordance with SOM Policies, Standards, and Procedures, and NIST controls.
• Lead team members and vendors in proper artifact collection to satisfy assessment requirements.
• Coordinate scanning and enterprise activities with MCS, tech leads, and business areas.
• Lead the system Data Classifications portion of the SSP/ATO process.

Requirements

• 1 to 3 years of experience in IT security or a related field.
• Knowledge of commonly used concepts, practices, and procedures within IT security (e.g., NIST, SSP, GRC).
• Experience with Keylight is a plus.
• Strong communication and customer service skills.

Qualifications

• A bachelor's degree or higher with 21 semester (32 term) credits in computer science, data processing, computer information systems, data communications, networking, systems analysis, computer programming, or mathematics; OR
• An associate's degree with 16 semester (24 term) credits in the fields listed above AND at least two years of experience as an application programmer, computer operator, or information technology technician; OR
• A high school diploma or equivalent AND three years of experience as an application programmer, computer operator, or information technology technician.
• Candidates must have either a bachelor's degree or higher specific to IT or a Cyber Security certification. Official transcripts or the Cyber Security certificate must be attached.

Benefits

• Long-term stability with multi-year opportunities and room for growth.
• Comprehensive health coverage for you and your family.
• 401(k) program for future financial security.
• Immediate Green Card processing assistance, if required.