IT Security Analyst

IT Secuirity Analyst
lansing,MI
Hybrid

Responsibilities

• Create SSPs via collaboration with Client Automation Managers, System Owners, System Security Administrators, and project team for new applications in alignment with the Secure Application Development Life Cycle
• Maintain SSPs for existing applications requiring ATO and those facing software and/or hardware enhancements.
• Collaborate with business representatives to establish system registration.
• Lead and identify security testing and system scanning requirements.
• Perform risk assessments and provide responses for security controls.
• Continuously monitor plans of action and milestones and corrective action plans as they relate to the SSPs in collaboration with the Client Enterprise Information Management office.
• Validate respective SSPs to ensure NIST control requirements are met.
• Author recommendations associated with findings on how to improve the customer’s security posture in accordance with SOM Policies, Standards, and Procedures, and NIST (National Institute of Standards and Technology) controls.
• Lead team members and vendors with proper artifact collection to satisfy assessment requirements.
• Coordination of scanning activities/enterprise activities with MCS, tech leads, and business areas.
• Lead the system Data Classifications part of the SSP/ATO process.

• 1 to 3 years of experience in the field or in a related area.
• Has knowledge of commonly used concepts, practices, and procedures within a particular field.