IT Security Analyst

Job Summary - IT Security Analyst 3

- Serve as a senior IT Business/Compliance Analyst within the Department of Technology, Management and Budget (DTMB) for multiple Michigan state agencies (MDCR, MCSC, MiLEAP). - Provide oversight and leadership for maintaining, updating, and ensuring accuracy of System Security Plans (SSPs) and Disaster Recovery Plans (DRPs). - Act as compliance authority and liaison among business partners, technical teams, security groups, and management. - Ensure all requirements, processes, and documentation align with State of Michigan standards, NIST protocols, and enterprise security governance. - Lead and coordinate the Authority to Operate (ATO) renewal process for applications, ensuring continuous compliance and approval. - Review and assess security risk assessments, develop and recommend corrective actions, and inform management of outcomes. - Support and guide stakeholders through complex compliance cycles, driving consistency and best practices across application areas. - Manage and track Plans of Action & Milestones (POA&Ms), ensuring timely closure and compliance with all regulatory requirements. - Analyze and identify gaps in compliance documentation and implement corrective actions as needed. - Facilitate cross-functional collaboration to ensure required evidence and artifacts for SSP and ATO processes are completed and maintained. - Oversee review, remediation, and updates of security controls in cooperation with stakeholders. - Lead incident response activities for mid to high-level security incidents, including detection, correlation, response, and recovery. - Mentor team members, contribute to enterprise security governance, and drive timely completion of compliance activities.