Job Title: System Security Analyst
Location: Lansing, MI
Duration: 12 Months
Work Arrangement: To Be Confirmed
Job Summary
We are seeking an experienced System Security Analyst to support enterprise security governance, risk management, and compliance initiatives. The ideal candidate will serve as a key liaison between business stakeholders, technical teams, security groups, vendors, and management to ensure compliance with established security standards and regulatory requirements.
The candidate will be responsible for maintaining System Security Plans (SSPs), coordinating Authority to Operate (ATO) renewals, managing security controls, tracking Plans of Action and Milestones (POA&Ms), and supporting incident response activities. Strong knowledge of NIST frameworks, Governance, Risk, and Compliance (GRC), and IT security documentation is essential.
Key Responsibilities
-
Lead the development, maintenance, and periodic updates of System Security Plans (SSPs), ensuring alignment with NIST frameworks and security compliance standards.
-
Coordinate Authority to Operate (ATO) renewal processes, including documentation, evidence collection, timelines, and approval activities.
-
Ensure applications maintain valid ATO approvals through established three-year renewal cycles.
-
Review security risk assessments, identify vulnerabilities, and recommend corrective actions.
-
Assess high-level security incidents, evaluate associated risks, and prepare management reports.
-
Develop security metrics and perform trend analysis across multiple business areas.
-
Coordinate and track Plans of Action and Milestones (POA&Ms) to ensure timely remediation and closure.
-
Identify compliance gaps and drive corrective actions to meet organizational and regulatory requirements.
-
Collaborate with technical teams, business owners, enterprise security groups, auditors, vendors, and project managers.
-
Review and oversee security controls, supporting documentation, and compliance evidence.
-
Improve security governance processes, documentation standards, and compliance procedures.
-
Provide guidance and mentorship to team members on security compliance activities.
-
Lead moderate-to-high-level incident response activities, including cyber event detection, analysis, response, and recovery.
Required Qualifications
-
Bachelor's degree in Cybersecurity, Information Assurance, Business Analytics, Information Technology, or a related field.
-
Alternatively, 5 years of relevant professional experience.
-
Strong knowledge of NIST frameworks, security protocols, and controls.
-
3+ years of Governance, Risk, and Compliance (GRC) experience.
-
5 years of experience providing audit evidence to meet security standards such as NIST, PCI, HIPAA, and FERPA.
-
5 years of experience working with complex IT web applications within the past 5 years.
-
5 years of experience leading meetings and preparing oral and written reports.
-
5 years of experience serving as a liaison between business and IT teams.
-
Strong written and verbal communication skills.
-
Excellent technical documentation and analytical skills.
-
Ability to collaborate effectively with cross-functional teams.
Preferred Qualifications
-
Master's degree in Cybersecurity, Information Assurance, Information Systems, IT Leadership, or an MBA with an IT/Security concentration.
-
2+ years of experience creating supporting documentation for IT system audits.
-
2+ years of experience developing Disaster Recovery Plans (DRPs), Business Continuity Plans (BCPs), and Incident Response Plans.
-
Keylight experience (1-3+ years strongly preferred).
Required Skills Matrix
| Skill | Requirement | Experience |
| Governance, Risk & Compliance (GRC) | Required | 3+ Years |
| Security Audit Evidence - NIST, PCI, HIPAA, FERPA | Required | 5 Years |
| Complex IT Web Applications | Required | 5 Years |
| Meeting Leadership & Reporting | Required | 5 Years |
| Business and IT Stakeholder Coordination | Required | 5 Years |
| IT System Audit Documentation | Highly Desired | 2 Years |
| Disaster Recovery, Business Continuity & Incident Response Plans | Highly Desired | 2 Years |
| Keylight | Highly Desired | 1-3+ Years |
Additional Information
-
Location: Lansing, Michigan
-
Contract Duration: 12 Months
-
Focus Areas: Information Security, NIST Compliance, GRC, SSP, ATO, POA&M, Security Audits, and Incident Response.
Interested candidates with strong experience in IT security compliance, NIST frameworks, GRC, security documentation, and enterprise risk management are encouraged to apply.
