Title: IT security Compliance Specialist - Hybrid

Location: Lansing, MI, United States

Length: Long term

Restriction: W2 or C2C

Description:

*** Very long term project initial PO for 1 year and usually the project goes for 3/5 years with this customer *** *** Hybrid *** 2 days a week onsite (Monday and Tuesday )

** Local and non local candidates may apply. **

Job Description:

This position will function as a Compliance Specialist within the Department of Technology, Management and Budget (DTMB), supporting the following Agency Services Divisions DTMB.

This specialist is responsible for the security compliance design, planning, implementation, and support of our customer applications. This position is responsible for the adherence to, compliance with and reporting on, all Federal, State and Industry technical security requirements for our customers applications. This position is responsible for supporting DTMB staff, working as a liaison between Agency Services and other areas, and the vendor partners. Clear communication and presentation skills are required. Must be able to clearly explain technical information to both technical and non technical individuals.

Our division has a portfolio of 100+ applications, with varying compliance requirements including, but not limited to NIST 800 53, IRS Publication 1075, DTMB Policy, Standards, Procedures, as well as those pertaining to PHI, PI, PII. These multi million dollar systems require a Compliance Specialist to ensure compliance with policies, processes and State and Federal security mandates. This position will also be required to interpret the frameworks, regulations, laws, policies and GRC tool the State of Michigan and our division must adhere to.

NIST 80053
Follow the IT security technical architecture design methodology and best practices.
External Vendor contact/Communication skills
Microsoft SharePoint
Microsoft Excel

Nice to Have:

Expertise for adherence to Payment Card Industry (PCI) Data Security Standards (DSS), IRS Publication 1075 regulations, and IRS Safeguards Computer Security Evaluation Matrices (SCSEMs).
CJIS / CMS / HIPPA security frameworks
SOC II knowledge
Keylight (by Navex) GRC Tool

Top Skills & Years of Experience: Required 3/5 years experience for skills below:

Knowledge of Cyber Security
NIST 80053
Follow the IT security technical architecture design methodology and best practices.
External Vendor contact/Communication skills
Microsoft SharePoint
Microsoft Excel
Clear and concise communication skills required.