IT Security Specialist I

• Location: Detroit, Michigan
• Type: Contract
• Job #107683

W2 Contract
Hybrid to Detroit, MI
$45/HR with 2 weeks PTO and contribution towards healthcare

Engagement Description

The EIS Compliance/Governance Analyst will support the execution of security framework compliance and governance activities. This role will help document adherence to governance requirements across policies, standards, procedures, controls, compliance, training, and awareness, as well as prepare metrics, KPIs, and reporting materials.
Top 3 Required Skills/Experience

• 4-5 years of experience in IT compliance, IT assessments, and/or IT audit, with a strong understanding of Governance, Risk, and Compliance (GRC).
• Knowledge of security and risk frameworks and standards, including HITRUST CSF, NIST CSF, ISO/IEC 27001, and COBIT.
• Strong written and verbal communication and critical thinking skills, with the ability to work independently as a self-starter.

Key Responsibilities

• Evaluate the design and operating effectiveness of Business and IT operations against the HITRUST CSF and identify areas for improvement.
• Interview subject matter experts (SMEs) and document key information and meeting minutes.
• Examine evidence and documentation, perform detailed testing, and document assessment notes and results.
• Conduct process walkthroughs to learn and understand company functions and processes.
• Analyze root causes of issues and provide recommendations for process improvements and risk mitigation.
• Collaborate with cross-functional teams to mitigate risks and maintain compliance with HITRUST CSF requirements.
• Develop clear and concise documentation that meets HITRUST quality standards.
• Prepare dashboards, metrics, issue analysis, and assessment status reporting.
• Utilize GRC tools to manage assessment remediation plans and supporting documentation.
• Serve as a HITRUST subject matter expert.
• Provide support during audits, assessments, and third-party reviews.
• Support additional initiatives and projects as needed.
• Build strong internal relationships and promote teamwork and collaboration.

Additional Required Skills/Experience

• Strong written and verbal communication skills with the ability to tailor communication to different audiences.
• Experience coordinating and executing the audit lifecycle, including evidence collection, review, observation tracking, management responses, and auditor communication.
• Strong problem-solving and decision-making skills.
• Experience testing IT controls across systems, databases, applications, and operating systems.
• Ability to clearly communicate information based on the experience and knowledge level of the audience.
• Strong critical thinking skills with the ability to identify and implement solutions to work-related problems.
• Ability to manage conflict and make effective decisions under pressure while maintaining a professional demeanor.
• Strong organizational and multitasking skills.
• Ability to adjust to changing priorities.
• Self-directed and able to work with minimal guidance while proactively seeking assistance when needed.

Preferred Skills/Experience

• Knowledge or experience with Information Technology GCC and Governance, Risk, and Compliance.
• Experience performing IT audits and/or assessments.
• Experience working with security and risk frameworks such as HITRUST CSF and NIST CSF.
• Strong communication and critical thinking skills.

Education/Certifications

• Undergraduate degree preferred, but not required.
• Master's degree such as an MBA, MSIS, or MIS preferred, but not required.
• Five years of combined IT experience, including two years of IT security experience.
• Experience in Information Security, IT general controls, IT compliance, IT assessments, and/or IT audit.

#LI-EH2

#INDPRO