Departmental Specialist ; Security​/Privacy Specialist

The Michigan Department of Corrections is proud to be a Michigan Veteran's Affairs Agency (MVAA) Gold Level Veteran Friendly Employer. MDOC is proud to employ nearly 1,500 veterans and actively serving military members across the department. The Department has many benefits and services available to support our military and veteran employees, spouses, and families. Learn more about what makes MDOC a Gold-Level Veteran Friendly Employer here.

This position is a BOA (Budget and Operations Administration) Information Security and Privacy specialist for the Office of Research and Planning, Data Security and Privacy unit supporting Michigan Department of Corrections (MDOC) Security Accreditation Process (MiSAP). The Information Security and Privacy specialist serves as the lead subject matter expert for coordinating the development, integration, research, evaluation, and recommendation of security controls, business process flows, and standards to maintain the confidentiality, integrity, and availability of Michigan Department of Corrections (MDOC) data during the Security Accreditation Process (MiSAP).

This position provides expert level oversight of MDOC’s completion and maintenance of System Security Plans for department-wide applications, ensuring alignment with existing DTMB-implemented technical controls and statewide security requirements. This position serves as the subject matter expert responsible for interpreting SOM IT Technical Standards, NIST 800-53, HIPAA, CJIS, and other required regulations, policies and frameworks using the State of Michigan’s GRC tool, documentation and other materials as required.

This position serves as the liaison to DTMB, contracted vendors, and MDOC staff for the designated business areas. In addition, this position functions as the subject matter expert for internal, State or Federal audits, providing outreach to IT and non-IT staff, data collection, exception handling, and conducting presentations on relevant security and privacy topics within the work area.

Possession of a bachelor's degree in any major.

Four years of professional experience, including two years equivalent to the experienced (P11) level or one year equivalent to the advanced (12) level.

Alternative experience qualifications of nonprofessional experience, previously identified by the appointing authority and approved by Civil Service, will be accepted as a substitute for the required classified, professional experience for the classification. The nonprofessional experience must be related to departmental programs and services that provide the required knowledge, skills, and abilities. Individuals appointed must possess the department-specific alternative experience for positions within that agency only.

Applicants must possess a bachelor’s degree and the experience listed below or two additional years of the stated experience to substitute for the degree.

Two years of MDOC experience as an Assistant Resident Unit Supervisor 11, Corrections Shift Supervisor 11, Departmental Supervisor 11, Food Services Supervisor 11, Corrections Shift Supervisor 12, Departmental Supervisor 12, Fire Safety Supervisor 12, Industries Supervisor 12, or Medical Records Examiner Supervisor 12.

• Thorough knowledge of advanced principles, concepts, techniques, and best practices of information security. Knowledge of the disciplines of information security.
• Ability to prepare and develop reports, document findings, and provide information.
• Knowledge of MDOC software applications, security database applications and how they are used by Department staff in the performance of their job functions according to Department policy and procedure.
• Knowledge of the operational and technical problems involved in the administration of a specialized program.
• Knowledge of the assigned program specialty.
• Knowledge of methods of planning, developing, and administering programs.
• Knowledge of state and federal laws and legislative processes related to the work.
• Knowledge of the need, preparation, and use of reports.
• Ability to plan, direct, and…