Security Analyst (local to MI)

Business Analyst 5:

Job Description:

Develops and implements risk policies, standards, and procedures (PSP) per applicable privacy and security framework to address audit gaps. Provides risk and compliance related support to the Security Accreditation Process Team and Information Security Officer (ISO) in best aligning policies/procedures with relevant Plan of Actions and Milestones (POAM). Reviews, analyzes and identifies opportunities and leads to PSP to reduce policy burden on enterprise and increase the proper alignment across the agency. Properly manages potential policy changes and impacts, risk-based recommendations, and relevant resolution/mitigation plans. Facilitates cross-functional team meetings to best reach agreement on the most effective and sustainable PSP in various risk and compliance areas. Communicates and socializes Security policy and risk management throughout the organization and gather feedback where appropriate. Manage the processes to streamline PSP.

Candidates must have 1–2+ years with each of the following:

• CJIS
• NIST
• FERPA
• Keylight
• FOIA
• System Security Plans
• Application Security Scanning
• Plan of Action Milestones (POAMs)

Required Skills

• Communication
• Customer Service
• Organization

A bachelor’s degree is required.

Top Skills & Years of Experience

• 2+ years overall experience
• Experience with NIST and CJIS (1–2+ years)
• Keylight experience (1–2+ years)
• Bachelor's degree required

Additional Details

• Interview Process: Virtual Interview via MS Teams video. Please use laptop and be prepared to share screen if asked.
• Duration: 1 year with extension likely
• Hybrid: Resource will be working a hybrid schedule. NO REMOTE ONLY OPTION. Will need to be onsite from day 1, two days a week (Wednesdays are a required onsite day)
• Local candidates ONLY: Candidates must be located within 1–1.5 hours of Lansing, MI at time of submission.

Skill Years Required:

1–2+ years of experience with CJIS

1–2+ years of experience with NIST

1–2+ years of experience with FERPA

1–2+ years of experience with Keylight

1–2+ years of experience with FOIA

1–2+ years of experience with System Security Plans

1–2+ years of experience with Application Security Scanning

1–2+ years of experience with Plan of Action Milestones (POAMs)