Job Title: Business Analyst 5 (Risk & Compliance)

Location: Lansing, MI (Onsite)
Duration: Contract

Job Description

We are seeking a Business Analyst (Risk & Compliance) to support security policies, risk management, and compliance initiatives. The candidate will work closely with the Information Security Office and Security Accreditation teams to align policies with regulatory frameworks and improve enterprise-wide security processes.

Key Responsibilities

• Develop and implement risk policies, standards, and procedures (PSP)
• Support security accreditation processes and compliance initiatives
• Align policies with POAM (Plan of Action & Milestones) and audit requirements
• Identify gaps and recommend risk mitigation strategies
• Facilitate cross-functional meetings to drive policy alignment
• Communicate and promote security policies across the organization
• Manage policy updates, process improvements, and compliance tracking

Required Skills & Experience

• Experience with:

• CJIS

• NIST frameworks

• FERPA compliance

• FOIA regulations

• System Security Plans (SSP)

• Application Security Scanning

• POAM (Plan of Action & Milestones)

• Keylight (risk management tool)

• Strong communication and stakeholder management skills
• Good organizational and documentation skills
• Experience in risk, compliance, or information security analysis

Education

• Bachelor's Degree required