Security & Compliance Analyst (MI-165002)

• * Candidates outside the 75-mile radius of Lansing may be considered, however, if selected MUST relocate at their own expense within 2-weeks of their start. There are no exceptions for this, if a candidate is selected and cannot relocate, their assignment will be ended.
• **Interviews will be conducted IN-PERSON in Lansing, MI.

MANDATORY REQUIREMENTS:

• Professional experience in security, compliance, risk management, or a closely related discipline within a government agency, public retirement system, or regulated financial environment (7+ years)
• Experience with knowledge of security and compliance frameworks relevant to public sector environments, such as NIST CSF, NIST 800 53, and state IT security standards (5+ years)
• Experience and proficiency in tools used to support security documentation, compliance tracking, and workflow management (e.g., Azure DevOps, GRC platforms) (5+ years)
• Experience contributing to development, documentation, and testing of Disaster Recovery Plans (DRPs) for critical systems (5+ years)
• Experience in assisting in defining recovery time objectives (RTOs) and recovery point objectives (RPOs) (5+ years)
• Experience developing, documenting, and evaluating security controls, compliance requirements, and governance processes (5+ years)
• Experience supporting security or compliance assessments, audit activities, policy reviews, and control validations (5+ years)
• Experience participating in system or process changes with a focus on ensuring data protection, access controls, regulatory adherence, and secure implementation (5+ years)
• Knowledge of Agile SDLC practices with an emphasis on integrating security and compliance into requirements, testing, and release processes (5+ years)
• Ability to assess common vulnerabilities such as XSS, CSRF, SQL Injection, and authentication weaknesses (5+ years)
• Proficiency in tools used to support security documentation, compliance tracking, and workflow management (e.g., Azure DevOps, GRC platforms) (5+ years)
• PREFERRED QUALIFICATIONS
• Previous government or military experience
• Bachelor’s degree in Information Security, Cybersecurity, Information Systems, Public Administration, or a related field; or equivalent experience
• Experience supporting security and compliance needs within public pension or retirement administration programs
• Working knowledge of security capabilities and data protection requirements within pension administration platforms or enterprise benefits systems
• Experience using SQL or analytics tools (Power BI, advanced Excel) to support compliance monitoring, security metrics, reporting, and data validation
• Professional security or compliance certifications such as CGRC, CAP, Security+, CISA, or similar
• Knowledge of state and federal regulations governing data security, privacy, and compliance within public sector retirement systems (IRS, SSA, state statutes, audit standards)
• Familiarity with Java or the .NET framework
• High level understanding of how web applications function.

The Security & Compliance Analyst supports the integrity, security, and compliance of systems and processes used in administering retirement benefits for public sector employees. This role ensures that technology solutions, operational practices, and policy implementations adhere to state regulations, security standards, and organizational governance requirements. The analyst will collaborate with cross‑departmental teams to strengthen security controls, improve business processes, and ensure consistent delivery of secure and reliable services to stakeholders and citizens.