Senior IT Business / Compliance Ana...

Role Overview

This Senior IT Business / Compliance Analyst serves as a senior resource supporting the Department of Technology, Management and Budget (DTMB) Agency Services for the Michigan Department of Civil Rights (MDCR), Michigan Civil Service Commission (MCSC), and Michigan Department of Lifelong Education, Advancement and Potential (MiLEAP).

Location & Work Arrangement

• Location: Lansing, MI
• Type: Hybrid Onsite two days per week from Day 1
• Candidate Location: Local candidates only; must be within 90 miles of Lansing, MI at the time of submission. Remote-only candidates are not accepted.

Job Duration & Interview Process

The position is for a duration of 1 year with extension likely. The interview process includes a first round virtual meeting, followed by a potential second round in person where onsite availability is required.

Key Responsibilities

• Serve as the compliance authority and liaison between business partners, technical teams, security groups, and management for MCSC and MiLEAP applications.
• Provide high-level oversight to maintain System Security Plans (SSPs) and Disaster Recovery Plans (DRPs), ensuring alignment with State of Michigan standards and NIST protocols.
• Lead the Authority to Operate (ATO) renewal process on a three-year cycle, managing timelines and securing approvals for valid ATOs.
• Review security risk assessments, advise management, recommend corrective actions, and assess risks for high-level incidents.
• Conduct trend analysis, provide insights into security incidents, and track Plans of Action and Milestones (POA&Ms).
• Analyze compliance documentation to identify gaps or risks and guide corrective actions.
• Oversee the review and remediation of security controls across MDCR, MCSC, and MiLEAP agencies.
• Serve as an incident response specialist for cyber event detection, correlation, response, and recovery.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Assurance, Business Analytics, or a related IT field. Alternatively, 5 years of relevant experience may be considered.
• Mandatory knowledge of the NIST Framework and security controls.
• Strong written and verbal communication skills with excellent documentation abilities.

Preferred Education

Master's degree in Cybersecurity, Information Assurance, or IT Leadership. MBA with an IT or Security concentration is highly valued.

Required Skills & Experience (3+ Years)

• Governance, Risk and Compliance (GRC) experience.
• Providing audit evidence to comply with security standards such as NIST, PCI, HIPAA, and FERPA.
• Exposure to complex IT web applications within the past 5 years.
• Leading meetings and preparing oral/written reports.
• Working as a liaison between different business and IT areas.
• Creating supporting documentation for IT system audits.

Highly Desired Skills (1-3 Years)

• Creating Disaster Recovery Plans, Business Continuity Plans, and Incident Response Plans.
• Keylight experience.