W2 Contract : System Analyst 6 – Security & Compliance
Location: Lansing, MI
Work Mode: Hybrid – 2 days onsite per week (Tuesday & Wednesday)
Duration: 12 months + possible extension
Interview: In-person
Local Candidates: Strongly preferred within 75 miles of Lansing, MI

Position Overview
We are seeking an experienced System Analyst 6 – Security & Compliance to support security, compliance, risk management, governance, and business continuity initiatives for critical enterprise systems.
The ideal candidate will have strong experience working with security frameworks, compliance requirements, security controls, audits, risk assessments, disaster recovery, and business continuity planning. This role will work closely with business stakeholders, technical teams, security teams, and program leadership to ensure systems and processes meet organizational and regulatory security requirements.

Key Responsibilities
Analyze, document, and validate security, compliance, and system requirements.
Develop and maintain audit-ready documentation, including security requirements, user stories, workflows, use cases, System Security Plans, assessment documentation, and authorization packages.
Support implementation and validation of security controls, access controls, data protection requirements, and compliance standards.
Conduct security risk assessments, gap analyses, impact assessments, and recommend appropriate mitigation strategies.
Support internal and external security audits, compliance assessments, policy reviews, and control validations.
Work with stakeholders to evaluate the security impact of system changes, policy updates, legislative/regulatory changes, and new initiatives.
Participate in Agile SDLC, solution design, UAT, testing, and release activities, ensuring security and compliance requirements are addressed.
Use tools such as Azure DevOps and GRC platforms for requirements, documentation, workflow, compliance tracking, and project activities.
Develop and maintain Disaster Recovery Plans (DRPs) and Business Continuity Plans (BCPs) for critical systems.
Assist with defining and validating Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs).
Conduct Business Impact Assessments (BIAs) and participate in DR/BC tabletop exercises and simulations.
Identify gaps in recovery plans and coordinate remediation activities.
Ensure DR/BC activities align with applicable NIST, FISMA, state security policies, and organizational standards.
Coordinate vulnerability scanning activities with infrastructure and security teams.
Review vulnerability scan results, prioritize risks, and support remediation and mitigation planning.
Assess common application security vulnerabilities, including XSS, CSRF, SQL Injection, and authentication weaknesses.
Prepare compliance reports, security metrics, risk tracking information, and data analysis to support management decision-making.
Collaborate with cross-functional teams and provide guidance on security, compliance, risk management, and governance best practices.
Support security awareness, training, documentation, and continuous improvement initiatives.
Assist with security incidents, compliance issues, and audit activities by coordinating information and supporting timely resolution.

Required Qualifications
7+ years of professional experience in security, compliance, risk management, systems analysis, or a closely related field.
5+ years of experience working with security and compliance frameworks such as:
NIST CSF
NIST 800-53
State IT security standards
5+ years of experience using tools for security documentation, compliance tracking, and workflow management, such as Azure DevOps or GRC platforms.
Strong experience with security controls, compliance requirements, governance processes, audits, and assessments.
5+ years of experience contributing to the development, documentation, testing, or maintenance of Disaster Recovery Plans (DRPs).
Experience defining or supporting RTOs, RPOs, BCPs, and Business Impact Assessments.
Experience with risk assessments, vulnerability management, control validation, and remediation planning.
Strong understanding of Agile/SDLC processes and security integration throughout requirements, development, testing, and release activities.
Excellent analytical, documentation, communication, and stakeholder-management skills.

Preferred Qualifications
Previous government or military experience.
Experience supporting public-sector, retirement, pension, benefits, or regulated environments.
Bachelor’s degree in Cybersecurity, Information Security, Information Systems, Public Administration, or a related field.
Security/compliance certifications such as Security+, CISA, CGRC, CAP, or similar.
Experience with SQL, Power BI, or advanced Excel for security and compliance reporting.
Familiarity with state and federal data security, privacy, and regulatory requirements.
Understanding of Java or .NET and enterprise web application architecture.

System Analyst

Similar Analytics Jobs

Senior FP&A Analyst

Analyst, Intellectual Property

Management Analyst II

Administrative Analyst This Position is EXEMPT from the State of Delaware Merit System.

Business Analyst

Salesforce Functional Business Analyst - Strong in retail domain