Security & Compliance System Analyst 6

Title: Security & Compliance System Analyst 6

Location: Lansing, MI – Hybrid - Must be within 90 Miles

Employment Type: 12+ Months

Industry: Public Sector / Government

We are looking for an experienced Security & Compliance System Analyst with a strong background in GRC, NIST frameworks, security audits, disaster recovery, business continuity, and vulnerability management.

Key Responsibilities:

• Perform security risk assessments, gap analyses, and control validations

• Support internal/external security audits and compliance assessments

• Develop and maintain security documentation, including SSPs, assessment reports, and authorization packages

• Develop, document, and test Disaster Recovery Plans (DRP) and Business Continuity Plans (BCP)

• Define and support RTO/RPO requirements and participate in tabletop exercises

• Coordinate vulnerability scans, analyze findings, prioritize risks, and track remediation

• Integrate security and compliance requirements into Agile SDLC processes

• Work with technical teams, business units, and stakeholders on security and governance initiatives

Required Qualifications:

• 7+ years of experience in Security, Compliance, GRC, Risk Management, or related areas

• 5+ years of experience with NIST CSF, NIST 800-53, and/or public-sector security standards

• 5+ years of experience with Azure DevOps and/or GRC platforms

• Strong experience with security controls, audits, risk assessments, governance, and compliance documentation

• Hands-on experience with DRP/BCP, RTO, and RPO

• Experience with vulnerability management and remediation tracking

• Understanding of common web vulnerabilities such as XSS, CSRF, SQL Injection, and authentication weaknesses

• Experience integrating security and compliance requirements into the Agile SDLC

Preferred:

• Government, public-sector, public retirement/pension, or regulated financial industry experience

• Bachelor’s degree in Cybersecurity, Information Security, Information Systems, or related field

• Certifications such as CGRC, CAP, Security+, CISA, or similar

• SQL, Power BI, or advanced Excel experience

• Familiarity with Java or .NET