What are the responsibilities and job description for the Security Analyst position at OP Consulting Group LLC?
Top Skills & Years of Experience:
- Governance, Risk and Compliance (GRC) - Required - 3 years (Keylight preferred)
- Experience providing audit evidence to comply with security standards such as NIST, PCI, HIPPA, FERPA - Required - 5 Years
- Exposure to Complex IT web Applications, within the past 5 years - Required - 5 Years
- Experience leading meetings and making oral and written reports - Required - 5 Years
- Experience working as a liaison between different business and IT areas - Required - 5 Years
- Knowledge or experience creating supporting documentation for IT system audits - Highly Desired - 2 Years
- Experience with the creation of Disaster Recovery Plans, Business Continuity Plans, and Incident Response Plans - Highly Desired - 2 Years
Job Responsibilities:
- Provide leadership and oversight for maintaining and updating System Security Plans (SSPs), ensuring documentation accuracy, completeness, and alignment with NIST protocol and SOM compliance standards.
- Lead and coordinate the Authority to Operate (ATO) renewal process, including planning, preparing required materials, managing timelines, and ensuring successful approval and continuous compliance for all supported applications.
- Ensure all applications maintain a valid ATO on a three-year cycle and lead efforts to validate and maintain accurate security controls throughout each renewal period.
- Review and inform management on security risk assessment results and recommend corrective actions as necessary.
- Assess risks and scope for high-level security incidents. Develop new reports for management based on collected metrics across multiple agencies and conduct trend analysis.
- Work with stakeholders to address and track Plans of Action & Milestones (POA&Ms) and other compliance requirements, ensuring timely reporting and closure.
- Provide senior-level support across multiple business areas, focusing on standardized security plan updates, documentation improvements, and long-term process consistency.
- Analyze existing compliance documentation, identify gaps or risks, and guide corrective actions to meet regulatory and organizational requirements.
- Coordinate cross-functional collaboration with technical teams, business owners, enterprise security personnel, and project leadership to ensure all evidence and artifacts required for SSP and ATO processes are properly completed and maintained.
- Oversee review, updates, and remediation of security controls, ensuring issues are tracked, communicated, and resolved in collaboration with stakeholders.
- Lead efforts to identify procedural gaps, risks, or required updates during renewal cycles, ensuring consistent application of best practices across all supported systems.
- Contribute to enterprise security governance by providing guidance, maintaining accurate records, mentoring team members, and driving timely completion of compliance activities.
- Lead mid to high-level Incident Responses when working to resolve incidents.
- Serve as the Incident response specialist for cyber event detection, correlation, response, and recovery.
Job Qualifications:
- Bachelor’s degree in Cybersecurity, Information Assurance, Business Analytics, or IT Related Field (OR: 5 years of experience)
- Preferred Advanced Degrees: Master’s in Cybersecurity, Information Assurance, Information Systems / IT Leadership, or an MBA with an IT or Security Concentration
- Educational or professional knowledge of NIST Framework and Controls is a must
- Strong aptitude for written and oral communication
- Strong documentation skills
- Ability to collaborate cross-functionally
Join our team in Lansing, MI, where you'll have the opportunity to work in a vibrant city known for its rich history and dynamic community. Enjoy a balanced lifestyle with a mix of urban and natural attractions, making it an ideal place for both work and leisure.
Hybrid work arrangement