Job Title: IT Security Analyst
Location: Michigan (Hybrid - In-office 2 days per week)
Duration: 1 Year with Possible Extension
Notes:
First Round: Virtual interview via MS Teams.
Second Round: In-person interview at the Dimondale, MI office.
Screenshot photo of candidate required for virtual interviews.
A vendor representative must be present at the beginning of the virtual interview to validate the candidate.
Hybrid: In-office 2 days per week (No remote-only option).
Local and non-local candidates accepted (Non-local candidates must relocate at their own expense with no delays).
Cover Sheet (attached).
Valid Right to Represent with hybrid work schedule acknowledgment confirmed by the candidate.
Candidate's Resume (Full legal first name & last name ONLY).
Job Description:
Assist the Michigan Cyber Security, Risk, and Compliance Division Director with enterprise risk management.
Assess enterprise data security policies, processes, procedures, and controls, recommending improvements where needed.
Conduct risk assessments for specific agencies, identifying gaps in security control environments and compliance requirements.
Perform gap analysis of security requirements in agency applications according to security regulations and policies.
Guide NIST controls and other security statutory and regulatory requirements.
Act as a subject matter expert, leading and mentoring within the Risk and Compliance Division.
Enter and manage information in Keylight to complete the risk assessment process.
Assist with MiSAP Risk Assessments and contribute to the development of a Cyber Security Framework for the State of Michigan.
Work with the MCS Keylight team to improve the MiSAP process.
Perform additional cybersecurity-related tasks as assigned
Skill Years of Experience Total Experience
IT security and audit experience6+ Years
Knowledge of national/international security standards (NIST, PCI, CJIS, CMS, ISO, SOX, HIPAA, HITECH)6+ Years
Security assessments and reviews6+ Years
Enterprise risk management process6+ Years
Data security policies, processes, procedures, and controls6+ Years
Risk assessment and compliance gap analysis6+ Years
Interpretation of NIST controls and regulatory requirements6+ Years
Experience using Keylight for risk assessment processes6+ Years
Experience with MiSAP Risk Assessment6+ Years
Cybersecurity framework implementation6+ Years
Strong communication and collaboration skills6+ Years
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
Report this job...Coast Mountain Cannabis in Pemberton BC is looking for Cannabis Trimmers to join our 31-person strong team. Our ideal candidate is passionate about cannabis, a self-starter, punctual, and engaged. If you have ever had an interest in getting involved in the Legal Cannabis...
Seeking an organized and efficient administrator who has experience in the construction (residential and commercial roofing) industry. Must be proficient in QuickBooks desktop and online, Google, Microsoft/Office 365 platforms, . Duties would entail clerical and administrative...
Department:Chemotherapy Infusion ClinicDescription:Rockcastle Regional Hospital is seeking a full time Clinical Manager. Looking for a Registered Nurse (RN) to be responsible for the management of clinical and administrative operations of the medical oncology and infusion...
...Suva-based position (Fiji) Attractive expatriate package Join the principal development organisation in the region Description The Pacific Community (SPC) is the principal scientific and technical organisation in the Pacific region, supporting development...
...year. That local longevity and being part of the PLACE inc. network sets The PLACE Real Estate Team apart from other real estate businesses in our area.We are serious about production because of what production does for you! In a sense, our people are our clients too....