IT Security Analyst

Job Title: IT Security Analyst

Location: Lansing MI / Day one onsite Hybrid (2 days onsite/ 3days remote)

Contract: 12 Months

Clear and concise communication skills required.

Top Skills & Years of Experience Required 35 years experience for skills below:

Knowledge of Cyber Security.

NIST 80053.

Follow the IT security technical architecture design methodology and best practices.

External Vendor contact/Communication skills.

Microsoft SharePoint

Microsoft Excel.

• This position will function as a Compliance Specialist within the Department of Technology Management and Budget supporting the following Agency Services Divisions.
• This specialist is responsible for the security compliance design planning implementation and support of our customer applications.
• This position is responsible for the adherence to compliance with and reporting on all Federal State and Industry technical security requirements for our customers applications.
• This position is responsible for supporting Client staff working as a liaison between Agency Services and other areas and the vendor partners. Clear communication and presentation skills are required.
• Must be able to clearly explain technical information to both technical and nontechnical individuals.
• Our division has a portfolio of 100 applications with varying compliance requirements including but not limited to NIST 80053 IRS Publication 1075 Client Policy Standards Procedures as well as those pertaining to PHI PI PII.
• These multimilliondollar systems require a Compliance Specialist to ensure compliance with policies processes and State and Federal security mandates.
• This position will also be required to interpret the frameworks regulations laws policies and GRC tool the Client and our division must adhere to.

Nice to Haves:

• Expertise for adherence to Payment Card Industry (PCI) Data Security Standards (DSS) IRS Publication 1075 regulations and IRS Safeguards Computer Security Evaluation Matrices (SCSEMs).
• CJIS / CMS / HIPPA security frameworks.
• SOC II knowledge.
• Keylight (by Navex) GRC Tool.