Security Analyst

• Lead the maintenance and updating of System Security Plans (SSPs), ensuring accuracy, completeness and alignment with NIST controls
• Plan and run the ATO renewal process on a three-year cycle, from preparing materials and managing timelines through approval and continuous compliance
• Validate and maintain security controls throughout each authorization period and oversee remediation of control gaps
• Track Plans of Action & Milestones (POA&Ms) and other compliance requirements through closure
• Review risk assessment results, brief management and recommend corrective actions
• Assess the risk and scope of high-level security incidents, lead mid- to high-level incident response, and support detection, response and recovery
• Develop metrics-based reports and trend analysis for management across multiple business areas
• Create and maintain Disaster Recovery Plans and contribute to business continuity and incident response planning
• Identify gaps in compliance documentation and drive consistent practices across supported systems
• Coordinate with technical teams, business owners and security staff to ensure SSP and ATO evidence and artifacts are complete and current
• Work across business owners, technical teams, enterprise security, vendors, auditors and project managers
• Mentor other analysts on the team

Senior IT Security Compliance Analyst

• Partner with Credit Application Teams to implement and manage IT controls
• Provide security and control consulting to application teams
• Support internal and third-party audits
• Support Credit Internal Controls with IT-related controls and deficiencies
• Manage issues identified by audit and application teams, including action-plan development, implementation, and sustainability
• Conduct reviews of identified IT-related audit deficiencies
• Support application teams with detailed risk assessments and threat modeling
• Support third-party risk management and supplier due diligence for onboarding and IT services
• Support Credit Privacy and Compliance Attorneys with IT-related regulatory requirements
• Support third-party consulting engagements
• Maintain accurate JIRA user stories and backlog
• Ensure the organization meets financial industry standards and requirements
• Support Ford Credit Bank requirements

Security Analyst jobs in Michigan

Senior IT Security Compliance Analyst

IT Compliance and Security Analyst