Job Seekers, Please send resumes to resumes@hireitpeople.com Primary Skills: Security analyst, cyber security, MS tools
Description:  The Business / Security Analyst will play a pivotal role in the Cyber Security Enhancements Program that will improve and extend the State of Michigan’s security capabilities.Primary responsibilities will include analyzing the current security policies and procedures, performing gap analysis work, addressing those gaps by 
creating/updating/deleting policy content, and in general participating in the enhancement of the security framework and program.
The Business / Security Analyst will work closely with the IT department’s security team, security consultants, project managers and other relevant stakeholders to accomplish these activities.
The Business / Data Analyst will be a key resource in both tactical activities as well as formal project initiatives following the standard project delivery methodology.
The ideal candidate must be a quick start, must be resourceful to accomplish tasks, and able to operate in a large complex IT environment. 
The candidate will need to have excellent written and verbal communication skills. 
The role is very hands-on and will include authoring documentation, process flows, presentations, guidelines, etc.
Review and assess current security policies and procedures.
Become a subject matter expert in the security policies and procedures. 
Perform various analysis tasks including but not limited to gap analysis and decomposition.
Author security policies and procedures (new and update).

Standardize documentation using templates and best practices. 
Organize the policies and procedures into a taxonomy. 
Work directly with the policy and process organization to publish the end deliverables.
Lead requirements efforts in the various project and work streams.

Skills Required: 
Business Analysis, Requirements documentation?5 years.
Facilitation Requirements gathering and documentation Gap Analysis techniques. Assessment of current State to derive future state Office tools such as MS Word, MS Excel, MS Powerpoint. Excellent written and verbal communication skills. Creative and Resourceful. Ability to work with little direction to accomplish objectives.

Skills Preferred: 
Developing enterprise polices. Developing enterprise procedures.
Developing enterprise standards.
Compliance Risk Management.
NIST PCI FedRamp.

Experience Required: 
Minimum 5-7 years of Business Analyst experience.
Experience in working within large IT organizations. Accomplished at facilitating sessions with cross-functional groups to gather appropriate inputs.
Excellent written and verbal communication skills. 
Ability to effectively work with employee and contract/consultants. 
Skilled with Microsoft products, in particular MS Word, MS Excel, MS PowerPoint.
Able to work on multiple workstreams and projects in parallel.

Experience Preferred:
Familiar with IT governance and framework disciplines. Experience in security is preferred.
Experience in security frameworks (i.e. NIST) is preferred.

Education Required: 
Bachelor Degree, preferably in IT, Engineering, Mathematics, Business.