Business Analyst (Risk/Policies)

Title: Business Analyst (Risk/Policies) Location: Lansing, MI (2 days a week onsite required)
Duration: Long Term Contract

Job Description:

• Develops and implements risk policies, standards, and procedures (PSP) per applicable privacy and security framework to address audit gaps.
• Provides risk and compliance related support to the Security Accreditation Process Team and MDOC Information Security Officer (ISO) in best aligning policies/procedures with relevant Plan of Actions and Milestones (POAM).
• Reviews, analyzes and identifies opportunities and leads to PSP to reduce policy burden on enterprise and increase the proper alignment across the agency.
• Properly manages potential policy changes and impacts, risk- based recommendations, and relevant resolution/mitigation plans.
• Facilitates cross-functional team meetings to best reach agreement on the most effective and sustainable PSP in various risk and compliance areas.
• Communicates and socializes Security policy and risk management throughout the organization and gather feedback where appropriate.
• Manage the processes to streamline PSP.

Candidates must have 1-2+ years with each of the following:

• CJIS
• NIST
• FERPA
• Keylight
• FOIA
• System Security Plans
• Application Security Scanning
• Plan of Action Milestones (POAMs)

Required Skills:

• 6+ years overall experience
• Communication
• Customer Service
• Organization

Education required:

• A bachelor s degree is required.