Security Analyst

Top Skills & Years of Experience:

• Governance, Risk and Compliance (GRC) - Required - 3 years (Keylight preferred)
• Experience providing audit evidence to comply with security standards such as NIST, PCI, HIPPA, FERPA - Required - 5 Years
• Exposure to Complex IT web Applications, within the past 5 years - Required - 5 Years
• Experience leading meetings and making oral and written reports - Required - 5 Years
• Experience working as a liaison between different business and IT areas - Required - 5 Years
• Knowledge or experience creating supporting documentation for IT system audits - Highly Desired - 2 Years
• Experience with the creation of Disaster Recovery Plans, Business Continuity Plans, and Incident Response Plans - Highly Desired - 2 Years

Job Responsibilities:

• Provide leadership and oversight for maintaining and updating System Security Plans (SSPs), ensuring documentation accuracy, completeness, and alignment with NIST protocol and SOM compliance standards.
• Lead and coordinate the Authority to Operate (ATO) renewal process, including planning, preparing required materials, managing timelines, and ensuring successful approval and continuous compliance for all supported applications.
• Ensure all applications maintain a valid ATO on a three-year cycle and lead efforts to validate and maintain accurate security controls throughout each renewal period.
• Review and inform management on security risk assessment results and recommend corrective actions as necessary.
• Assess risks and scope for high-level security incidents. Develop new reports for management based on collected metrics across multiple agencies and conduct trend analysis.
• Work with stakeholders to address and track Plans of Action & Milestones (POA&Ms) and other compliance requirements, ensuring timely reporting and closure.
• Provide senior-level support across multiple business areas, focusing on standardized security plan updates, documentation improvements, and long-term process consistency.
• Analyze existing compliance documentation, identify gaps or risks, and guide corrective actions to meet regulatory and organizational requirements.
• Coordinate cross-functional collaboration with technical teams, business owners, enterprise security personnel, and project leadership to ensure all evidence and artifacts required for SSP and ATO processes are properly completed and maintained.
• Oversee review, updates, and remediation of security controls, ensuring issues are tracked, communicated, and resolved in collaboration with stakeholders.
• Lead efforts to identify procedural gaps, risks, or required updates during renewal cycles, ensuring consistent application of best practices across all supported systems.
• Contribute to enterprise security governance by providing guidance, maintaining accurate records, mentoring team members, and driving timely completion of compliance activities.
• Lead mid to high-level Incident Responses when working to resolve incidents.
• Serve as the Incident response specialist for cyber event detection, correlation, response, and recovery.

Job Qualifications:

• Bachelor’s degree in Cybersecurity, Information Assurance, Business Analytics, or IT Related Field (OR: 5 years of experience)
• Preferred Advanced Degrees: Master’s in Cybersecurity, Information Assurance, Information Systems / IT Leadership, or an MBA with an IT or Security Concentration
• Educational or professional knowledge of NIST Framework and Controls is a must
• Strong aptitude for written and oral communication
• Strong documentation skills
• Ability to collaborate cross-functionally

Join our team in Lansing, MI, where you'll have the opportunity to work in a vibrant city known for its rich history and dynamic community. Enjoy a balanced lifestyle with a mix of urban and natural attractions, making it an ideal place for both work and leisure.

Hybrid work arrangement