Departmental Specialist - Data Protection and Management

Job Description

The Michigan Department of Health and Human Services mission is to provide opportunities, services, and programs that promote a healthy, safe, and stable environment for residents to be self‑sufficient. We are committed to ensuring a diverse workforce and a work environment wherein all employees are treated with dignity, respect, and fairness.

This position serves as the Security Specialist responsible for the development, implementation, coordination, and evaluation of security, privacy, and regulatory compliance activities required to ensure MDHHS adherence to federal and state standards, including NIST SP 800-53, IRS Publication 1075, and other applicable frameworks.

• Conduct and oversee System and Organization Controls (SOC) report reviews.
• Coordinate and participate in onsite security and compliance audits.
• Evaluate application security scanning results.
• Manage Plan of Action and Milestones (POAM) in Keylight, ensuring remediation is completed on schedule.
• Develop and maintain departmental security policies, procedures, and standards.
• Assess audit findings and risk evaluations, and recommend corrective actions to strengthen agency compliance posture.
• Develop and deliver security, privacy, and compliance training.
• Provide expert guidance to MDHHS leadership, program areas, and technical staff regarding security requirements, risk mitigation, and regulatory obligations.

• Bachelor’s degree in any major.
• Four years of professional experience, including two years equivalent to the experienced (P11) level or one year equivalent to the advanced (12) level.

The physical location of this position is 235 S. Grand Ave, Lansing, MI. Remote work or a hybrid schedule may be considered within operational limits. Candidates must confirm work location and schedule at the time of interview.

If you require a reasonable accommodation to participate in the application or selection processes, contact the ADA coordinator for the agency that posted this position vacancy.