System Analyst

Lansing, Michigan System Analyst #1063746

• 5+ years of experience with knowledge of security and compliance frameworks relevant to public sector environments, such as NIST CSF, NIST 800 53, and state IT security standards.
• 5+ years of experience and proficiency in tools used to support security documentation, compliance tracking, and workflow management (e.g., Azure Dev Ops, GRC platforms).
• 5+ years of experience contributing to development, documentation, and testing of Disaster Recovery Plans (DRPs) for critical systems.
• 5+ years of experience in assisting in defining recovery time objectives (RTOs) and recovery point objectives (RPOs).
• Previous government or military experience is preferred.
• A bachelor's degree in information security, cybersecurity, information systems, public administration, or a related field is preferred.

• The Security & Compliance Analyst supports the integrity, security, and compliance of systems and processes used in administering retirement benefits for public sector employees.
• This role ensures that technology solutions, operational practices, and policy implementations adhere to state regulations, security standards, and organizational governance requirements.
• The analyst will collaborate with cross-departmental teams to strengthen security controls, improve business processes, and ensure consistent delivery of secure and reliable services to stakeholders and citizens.

• Analyze, document, and validate security processes, system requirements, and interagency interactions supporting retirement benefits administration.
• Collaborate with program offices, technical teams, and subject matter experts to define and refine security and compliance requirements for system enhancements, policy updates, and new state initiatives.
• Create and maintain clear, audit-ready documentation, including security requirements, user stories, workflows, and use cases aligned with public sector standards and oversight expectations.
• Support solution design and participate in testing phases (e.g., UAT) to verify that security controls and compliance requirements are properly implemented.
• Recommend improvements that strengthen security posture, improve process efficiency, and support program accountability and service quality.
• Monitor project deliverables, timelines, and milestones to ensure alignment with organizational security objectives, state compliance mandates, and governance frameworks.
• Assist in developing training materials and delivering security and compliance education to program staff and stakeholders.
• Conduct gap analyses and assess impacts of legislative, regulatory, or policy changes on business operations and system security.
• Perform data analysis and generate reports to support compliance monitoring, performance evaluation, risk tracking, and data-driven decision-making across the organization.

• Provide guidance and informal leadership to cross-functional teams by promoting best practices in security, compliance, and risk management.
• Lead discussions with program offices, technology partners, and stakeholders to ensure alignment on security objectives, policy interpretations, and compliance expectations.
• Serve as a mentor to analysts by offering support in interpreting security frameworks, documenting requirements, and navigating governance processes.
• Champion a culture of security awareness and continuous improvement by fostering collaboration, communicating risks clearly, and influencing adoption of secure and compliant operational behaviors.
• Take ownership of key security and compliance initiatives, driving progress, managing expectations, and ensuring deliverables meet organizational standards and regulatory requirements.
• Provide leadership during security incidents, compliance issues, and audit activities by coordinating responses, ensuring timely communication, and supporting decision-making with clear, accurate analysis.

• Perform tasks in support of internal and external security and standards reviews.
• Conduct security risk assessments and recommend mitigation strategies.
• Assist with development and maintenance of security documentation, including System Security Plans, Assessment Reports, and Authorization packages.
• Support security audits by gathering documentation and demonstrating control effectiveness.

• Collaborate with business units to develop and maintain Business Continuity Plans (BCPs).
• Conduct business impact assessments and ensure DRP/BCP strategies align with operational needs.
• Participate in tabletop exercises and simulations to test and validate plans, documenting and addressing
• Ensure DRP/BCP efforts comply with policies, NIST, FISMA, and other applicable standards.

• Coordinate and schedule system, application, and network vulnerability scans in collaboration with…