Description

You will lead risk assessments and compliance efforts for the State of Michigan, bridging technical security requirements with business objectives.

Responsibilities

• Assist the Risk and Compliance Division Director with the enterprise risk management process.
• Assess the effectiveness of enterprise data security policies and controls against established standards, identifying improvement actions.
• Perform gap analysis of security requirements within agency applications according to security statutes and SOM policies.
• Provide guidance to Agency and DTMB staff on the interpretation of NIST controls and other regulatory requirements.
• Mentor team members and serve as a subject matter expert within the Risk and Compliance Division.

Required Skills

• 6+ years of experience in IT security and auditing.
• Expert knowledge of NIST Controls and ability to perform risk assessments.
• Extensive knowledge of national/international security standards including NIST, PCI, CJIS, CMS, ISO, SOX, HIPAA, and HITECH.
• Experience performing security assessments and reviews.
• Ability to coach and train other team members to improve processes.
• Excellent communication skills to act as a liaison between technical and business audiences.
• Customer-facing experience with the ability to explain complex security concepts clearly.
• Familiarity with Keylight and MiSAP risk assessment processes is preferred.

Preferred Skills

• Experience helping establish a Cyber Security Framework for a state or large government entity.
• Proven track record of improving risk assessment volumes and processes.

Key Skills

Education

IN PERSON INTERVIEW (LOCAL TO MI ONLY )