Security Analyst - MiLEAP, MCSC

Job Duties

• Provide leadership and oversight for maintaining and updating System Security Plans (SSPs), ensuring documentation accuracy, completeness, and alignment with NIST protocol and SOM compliance standards.
  
• Lead and coordinate the Authority to Operate (ATO) renewal process, including planning, preparing required materials, managing timelines, and ensuring successful approval and continuous compliance for all supported applications.
  
• Ensure all applications maintain a valid ATO on a three-year cycle and lead efforts to validate and maintain accurate security controls throughout each renewal period.
  
• Reviews and informs management on security risk assessment results and recommends corrective actions as necessary.
  
• Reviews, assesses risks and scope for high level security incidents.
  
• Develops new reports for management based on those collected metrics across multiple agencies: conducts trend analysis.
  
• Work with stakeholders to address and track Plans of Action & Milestones (POA&Ms) and other compliance requirements, ensuring timely reporting and closure.
  
• Provide senior-level support across multiple business areas, MDCR, MCSC & MiLEAP, with a focus on standardized security plan updates, documentation improvements, and long-term process consistency.
  
• Analyze existing compliance documentation, identify gaps or risks, and guide corrective actions to meet regulatory and organizational requirements.
  
• Coordinate cross-functional collaboration with technical teams, business owners, enterprise security personnel, and project leadership to ensure all evidence and artifacts required for SSP and ATO processes are properly completed and maintained.
  
• Oversee review, updates, and remediation of security controls, ensuring issues are tracked, communicated, and resolved in collaboration with stakeholders.
  
• Lead efforts to identify procedural gaps, risks, or required updates during renewal cycles, ensuring consistent application of best practices across all supported systems.
  
• Contribute to enterprise security governance by providing guidance, maintaining accurate records, mentoring team members, and driving timely completion of compliance activities.
  
• Leads mid to high-level Incident Responses when working to resolve incidents.
  
• Serves as the Incident response specialist for cyber event detection, correlation, response, and recovery
  

Requirements

• Experience providing audit evidence to comply with security standards such as NIST, PCI, HIPPA, FERPA Required
  
• Exposure to Complex IT web Applications, within the past 5 years
  
• Experience leading meetings and making oral and written reports
  
• Experience working as a liaison between different business and IT areas
  

Desired Skills

• Knowledge or experience creating supporting documentation for IT system audits
  
• Experience with the creation of Disaster Recover Plans, Business Continuity Plans, and Incident Response Plans
  

Minimum Education

• Bachelor's Degree
  

Location

• Local candidates ONLY. Candidates must be located within 90 miles of Lansing, MI at time of submission.
  
• Position is a hybrid schedule with NO REMOTE ONLY OPTION. Will need to be onsite from day 1, two days a week.
  
• Working hours Monday-Friday, approximately 8:00 a.m. to 5:00 p.m.
  

Additional Requirements

• Must be authorized to work in the United States; We are unable to offer sponsorships at this time
  
• Must undergo a background check and drug screening for employment.
  

Employment Terms

• This is a W2 position
  
• 40 hrs per week
  
• HYBRID schedule -NO REMOTE ONLY OPTION. Will need to be onsite from day 1, two days a week.
  

Benefits