Departmental Specialist - Data Protection and Management

Overview

This position serves as the Security Specialist responsible for the development, implementation, coordination, and evaluation of security, privacy, and regulatory compliance activities required to ensure MDHHS adherence to federal and state standards, including NIST SP 800-53, IRS Publication 1075, and other applicable frameworks. Responsibilities include conducting and overseeing System and Organization Controls (SOC) report reviews; coordinating and participating in onsite security and compliance audits;

evaluating application security scanning results; and managing all associated Plan of Action and Milestones (POAM) in Keylight to ensure required remediation is completed in accordance with established timelines. The position develops and maintains departmental security policies, procedures, and standards; assesses audit findings and risk evaluations; and recommends corrective actions to enhance internal controls and strengthen agency compliance posture. The incumbent also develops and delivers security, privacy, and compliance training and provides expert guidance to MDHHS leadership, program areas, and technical staff regarding security requirements, risk mitigation, and regulatory obligations.

• Apply for this position online via NEOGOV; click on “Apply” in the job posting for instructions on submitting your electronic application. Hard copy applications are not accepted.
• Relevant experience and/or education referred to in supplemental questions must be documented in resume, transcript and/or application to allow for accurate screening.
• Attach a resume identifying specific experience and dates of employment. Dates of employment should include month and year and hours per week.
• Attach a cover letter.
• If applicable, attach a copy of an official transcript(s). We accept scanned copies of official transcripts. Official transcripts provide the name of the institution, confirmation that a degree was awarded and on what date, and the registrar’s signature.

Possession of a bachelor’s degree in any major.

Four years of professional experience, including two years equivalent to the experienced (P11) level or one year equivalent to the advanced (12) level.

The physical location of this position is 235 S. Grand Ave, Lansing, MI. Based on operational needs and within established limits, remote work and alternate or hybrid work schedule requests for this position may be considered.

Selected candidates who have been approved to work remotely or a hybrid schedule must complete that work within Michigan. Candidates should confirm work location and schedule at the time of interview.

Employees will be provided computers to perform state work. Phones may also be provided for necessary communications. If working remotely, employees will be responsible for providing other components of a remote office at their own expense, including:

• A secure work location that allows privacy and prevents distractions.
• A high-speed internet connection of at least 25 Mbps download and 5 Mbps upload.
• Suitable lighting, furniture, and utilities.

• The use of artificial intelligence (AI) software of any kind is prohibited in all areas of the selection process; including, but not limited to, responses to application questions, and responses to interview questions or exercises.

For information about this specific position, please email MDHHSVacancies. Please reference the job posting number in subject line.