What are the responsibilities and job description for the Cyber Security Analyst position at Masterapp Labs?
Job Details
Location: Michigan (Hybrid - In-office 2 days per week)
Duration: 1 Year with Possible Extension
-
First Round: Virtual interview via MS Teams.
-
Second Round: In-person interview at the Dimondale, MI office.
-
Screenshot photo of candidate required for virtual interviews.
-
A vendor representative must be present at the beginning of the virtual interview to validate the candidate.
-
Hybrid: In-office 2 days per week (No remote-only option).
-
Local and non-local candidates accepted (Non-local candidates must relocate at their own expense with no delays).
-
Cover Sheet (attached).
-
Valid Right to Represent with hybrid work schedule acknowledgment confirmed by the candidate.
-
Candidate's Resume (Full legal first name & last name ONLY).
-
Assist the Michigan Cyber Security, Risk, and Compliance Division Director with enterprise risk management.
-
Assess enterprise data security policies, processes, procedures, and controls, recommending improvements where needed.
-
Conduct risk assessments for specific agencies, identifying gaps in security control environments and compliance requirements.
-
Perform gap analysis of security requirements in agency applications according to security regulations and policies.
-
Guide NIST controls and other security statutory and regulatory requirements.
-
Act as a subject matter expert, leading and mentoring within the Risk and Compliance Division.
-
Enter and manage information in Keylight to complete the risk assessment process.
-
Assist with MiSAP Risk Assessments and contribute to the development of a Cyber Security Framework for the State of Michigan.
-
Work with the MCS Keylight team to improve the MiSAP process.
-
Perform additional cybersecurity-related tasks as assigned
| Skill | Years of Experience | Total Experience |
|---|---|---|
| IT security and audit experience | 6 Years | |
| Knowledge of national/international security standards (NIST, PCI, CJIS, CMS, ISO, SOX, HIPAA, HITECH) | 6 Years | |
| Security assessments and reviews | 6 Years | |
| Enterprise risk management process | 6 Years | |
| Data security policies, processes, procedures, and controls | 6 Years | |
| Risk assessment and compliance gap analysis | 6 Years | |
| Interpretation of NIST controls and regulatory requirements | 6 Years | |
| Experience using Keylight for risk assessment processes | 6 Years | |
| Experience with MiSAP Risk Assessment | 6 Years | |
| Cybersecurity framework implementation | 6 Years | |
| Strong communication and collaboration skills | 6 Years |
