IT Security Analyst

About the job IT Security Analyst

The main responsibilities are :

• The IT Security Analyst is responsible for completing and maintaining system security plans (SSP) for new and existing systems.
• This requires close coordination with IT project teams, business and enterprise security representatives, and product owners, to establish and maintain processes and controls for security vulnerability remediation.
• Create system security plans (SSP) for new applications in alignment with the Secure Application Development Life Cycle (SADLC) and Michigan Security Accreditation Process (MiSAP).
• Maintain SSPs for existing applications requiring authority to operate (ATO) and those facing software and / or hardware enhancements.
• Continuously monitor plans of action and milestones (POA&M) and corrective action plans (CAP) as they relate to the SSPs in collaboration with the MDOT Enterprise Information Management (EIM) office.
• Validate respective SSPs to ensure NIST control requirements are met.
• Author recommendations associated with your findings on how to improve the customers security posture in accordance with SOM PSP & NIST controls.
• Assist team members and vendors with proper artifact collection to satisfy assessment requirements.

Experience, Skills, Knowledge :

Top Skills