IT Security Analyst

We are looking for an IT Security Analyst 2 to join our team!

Location & Work Arrangement

• Location: Lansing, MI (Local candidates within 100 miles)
• Work Arrangement: Hybrid (2 days/week required onsite: Tuesdays & Wednesdays)

Role Overview

As a Compliance Analyst, you will build and maintain System Security Plans (SSPs) using Governance, Risk, and Compliance (GRC) tools. You'll work closely with IT project teams and security leaders to identify vulnerabilities, validate NIST controls, and lead applications through the Authority to Operate (ATO) process.

Key Responsibilities & Crux of the Role

• System Security Plans (SSP): Draft, update, and maintain SSPs for critical IT applications.
• Risk & Compliance: Conduct risk assessments, track remediation plans, and align systems with NIST security controls.
• Security Testing & Scans: Lead vulnerability scanning, data classification, and mitigation tracking.
• Collaboration: Coordinate security requirements with cross-functional technical teams and vendors.

Required Skills & Qualifications

• Experience: 1 3 years in IT Security, Compliance, or a related cybersecurity role.
• Core Standards: Strong working knowledge of NIST, SSP, and GRC concepts.
• Education / Certification (Must meet ONE):
  • Bachelor's/Associate's degree in IT/Computer Science, OR
  • Active Cybersecurity Certification (e.g., Security+, CISSP, CISA, etc.), OR
  • Equivalent technical work experience.
• Communication: Clear verbal and written skills to translate complex security concepts to stakeholders.

Bonus Skills

• Hands-on experience with Keylight (GRC tool).

Interview Process

• Virtual Interview: MS Teams video call (Laptop required; screen-sharing may be requested).
• Next Steps: Potential 2nd-round in-person interview.

Quick Skill Matrix Summary