Stafford Gray LLC
Stafford Gray LLC
1 – 10 Employees
ConsultingCybersecuritySaaS
Stafford Gray LLC is a Michigan-based IT consulting firm that helps public- and private-sector organizations modernize technology and improve operational performance. Established in 2020, the company works across digital transformation, IT governance, cybersecurity, and project delivery, combining services such as data analysis, artificial intelligence, automation, cloud services, and managed IT support. Its approach centers on practical, tailored solutions designed to strengthen efficiency, support innovation, and deliver measurable business outcomes.

Senior IT Security Compliance Analyst (Hybrid, Michigan)

Lead IT security compliance for public-sector applications through NIST controls, System Security Plans and three-year ATO renewals. Oversee risk management, incident response, remediation and compliance reporting.

Description

  • Maintain and update System Security Plans (SSPs) for accuracy, completeness and alignment with NIST controls
  • Manage three-year ATO renewal cycles, including preparation, scheduling, approval and continuous compliance
  • Validate security controls throughout authorization periods and oversee remediation of identified gaps
  • Track Plans of Action & Milestones (POA&Ms) and related compliance obligations through resolution
  • Evaluate risk assessment findings, brief management and recommend corrective actions
  • Assess major security incidents, lead medium- to high-severity response efforts and support detection, recovery and containment
  • Produce metrics-driven management reports and trend analyses across multiple business areas
  • Develop and maintain Disaster Recovery Plans and support business continuity and incident response planning
  • Identify weaknesses in compliance documentation and promote consistent practices across supported systems
  • Partner with technical teams, business owners and security personnel to keep SSP and ATO evidence complete and current
  • Collaborate with business owners, technical teams, enterprise security, vendors, auditors and project managers
  • Coach and mentor fellow analysts

Requirements

  • At least five years providing audit evidence for standards such as NIST, PCI, HIPAA or FERPA
  • At least five years working with complex IT web applications
  • At least five years leading meetings and delivering written and verbal reports
  • At least five years serving as a liaison between business and IT teams
  • Strong working knowledge of the NIST framework and its controls
  • Excellent writing and documentation abilities
  • Bachelor’s degree in cybersecurity, information assurance, business analytics or an IT-related field, or five years of equivalent experience
  • Two or more years creating documentation for IT system audits preferred
  • Two or more years developing Disaster Recovery, Business Continuity or Incident Response Plans preferred
  • Master’s degree in cybersecurity, information assurance or IT leadership, or an MBA with an IT or security concentration preferred
  • CISSP, CGRC (formerly CAP), CISA or CISM certification preferred

Related Jobs

Realstudio

Remote B2B Sales Representative

Realstudio
11 – 50 Employees
AdvertisingMarketingMedia

Set initial client calls and qualify prospects for RealStudio, a social content agency serving major DACH brands and scale-ups. The role focuses on booking closing calls, with the possibility of taking on closing calls later.

Open
Realstudio

Head of B2B Sales (Worldwide Remote)

Realstudio
11 – 50 Employees
AdvertisingMarketingMedia
€8,000 – €15,000 / month
RemoteFull-timeLeadGerman RequiredSales

Lead RealStudio’s B2B sales team and manage its pipeline. Build scalable sales operations for an agency creating social media content for major German brands.

Open