Authority To Operate

Authority To Operate Cybersecurity Jobs

3 jobs found

1mo ago

IT Security Analyst

Intellibee Lansing, MI

Lansing, MI

1mo ago Closed

Full time Application Security Authority To Operate Information Security

This position is no longer accepting applications (closed Nov 2, 2026).

Job Description

Intellibee is seeking an IT Security Analyst to oversee security planning, compliance readiness, and incident response support for MCSC and MiLEAP applications in Lansing, MI (onsite).

Responsibilities

Provide leadership and oversight for maintaining and updating System Security Plans (SSPs), ensuring documentation accuracy, completeness, and alignment with NIST protocol and SOM compliance standards.
Lead and coordinate the Authority to Operate (ATO) renewal process: plan, prepare required materials, manage timelines, and support successful approvals and continuous compliance.
Ensure each supported application maintains a valid ATO on a three-year cycle, including validating and maintaining accurate security controls during renewal periods.
Review and communicate security risk assessment results to management and recommend corrective actions as needed.
Assess risks and scope for high-level security incidents; create management reports using collected metrics and conduct trend analysis across multiple agencies.
Partner with stakeholders to manage Plans of Action & Milestones (POA&Ms) and other compliance requirements, ensuring timely reporting and closure.
Provide senior-level support across multiple business areas including MDCR, MCSC, and MiLEAP, focusing on standardized security plan updates, documentation improvements, and long-term process consistency.
Analyze compliance documentation to identify gaps or risks and guide corrective actions to meet regulatory and organizational requirements.
Coordinate cross-functional work with technical teams, business owners, enterprise security personnel, and project leadership to ensure evidence and artifacts for SSP and ATO processes are completed and maintained.
Oversee review, updates, and remediation of security controls, tracking issues, communicating status, and driving resolution with stakeholders.
Identify procedural gaps, risks, and required updates during renewal cycles; promote consistent use of best practices across supported systems.
Support enterprise security governance by maintaining accurate records, mentoring team members, and ensuring compliance activities are completed on time.
Lead mid to high-level Incident Responses during incident resolution.
Serve as an incident response specialist for cyber event detection, correlation, response, and recovery.

Requirements

Bachelor’s degree in cyber security, Information Assurance, Business Analytics, or an IT Related Field
OR: 5 years of experience
Educational or professional knowledge of the NIST Framework and Controls (required)
Strong written and oral communication skills
Strong documentation skills
Ability to collaborate cross-functionally
Experience providing audit evidence to comply with security standards such as NIST, PCI, HIPPA, FERPA (required - 5 years)
Exposure to complex IT web applications within the past 5 years (required - 5 years)
Experience leading meetings and producing oral and written reports (required - 5 years)
Experience serving as a liaison between different business and IT areas (required - 5 years)

Preferred

Advanced degrees: Master’s in Cybersecurity, Information Assurance, Information Systems / IT Leadership, or an MBA with an IT or Security Concentration
Knowledge or experience creating supporting documentation for IT system audits (highly desired - 2 years)
Experience with creation of Disaster Recovery Plans, Business Continuity Plans, and Incident Response Plans (highly desired - 2 years)

Technologies

NIST Framework and Controls
NIST
PCI
HIPPA
FERPA

Benefits

Long-Term Stability: Multi-year opportunities with room to grow
Comprehensive Health Coverage: Healthcare benefits for you and your family
401(k): Enrollment support to invest in your financial security
GC Assistance: Support for immediate Green Card processing, if required

Location: Lansing, MI (onsite)

Minimum Experience: 5 years

Education: Bachelor’s degree in cyber security, Information Assurance, Business Analytics, or IT Related Field

View full job page →

1mo ago

IT Security Analyst

Cilable Lansing, MI

Lansing, MI

1mo ago Closed

$50 - $60/hr Contract Authority To Operate Disaster Recovery Plans (drps) Incident Response

This position is no longer accepting applications (closed Nov 2, 2026).

Job Description

Cilable is hiring an IT Security Analyst for a contract role based in Lansing, MI (hybrid). This position supports DTMB Agency Services for multiple Michigan organizations, with senior ownership of security plan maintenance, compliance processes, and incident response support. If you value clear standards, measurable compliance outcomes, and working across business and technical stakeholders, this role keeps security documentation and risk management moving forward.

Compensation: $50.00 to $60.00 per hour. Work model: Hybrid remote in Lansing, MI 48916.

Responsibilities

Provide leadership and oversight for System Security Plans (SSPs), keeping documentation accurate, complete, and aligned with NIST protocol and SOM compliance standards.
Lead and coordinate the Authority to Operate (ATO) renewal process, including planning, preparing required materials, managing timelines, and supporting successful approval and continuous compliance for supported applications.
Ensure applications maintain a valid ATO on a three-year cycle, validating and maintaining accurate security controls throughout each renewal period.
Review and communicate security risk assessment results to management, including recommended corrective actions as needed.
Assess risks and define scope for high level security incidents; produce management reporting and perform trend analysis using metrics across multiple agencies.
Partner with stakeholders to address and track Plans of Action & Milestones (POA&Ms) and other compliance requirements, ensuring timely reporting and closure.
Support multiple business areas across MDCR, MCSC, and MiLEAP, with focus on standardized security plan updates, documentation improvements, and consistent long-term processes.
Analyze existing compliance documentation, identify gaps or risks, and guide corrective actions to meet regulatory and organizational requirements.
Coordinate cross-functional work with technical teams, business owners, enterprise security personnel, and project leadership to ensure SSP and ATO evidence and artifacts are properly completed and maintained.
Oversee review, updates, and remediation of security controls, tracking issues, communicating status, and resolving items with stakeholder support.
Lead identification of procedural gaps, risks, or renewal-cycle updates, ensuring best practices are applied consistently across supported systems.
Contribute to enterprise security governance by maintaining accurate records, mentoring team members, and driving timely completion of compliance activities.
Lead mid to high-level incident responses and serve as the incident response specialist for cyber event detection, correlation, response, and recovery.

Requirements

Bachelor’s degree in cyber security, Information Assurance, Business Analytics, or an IT-related field OR 5 years of experience.
Preferred: Advanced degree (Master’s in Cybersecurity, Information Assurance, Information Systems / IT Leadership, or an MBA with an IT or Security Concentration).
Knowledge of the NIST Framework and Controls (required).
Strong written and oral communication skills.
Strong documentation skills.
Ability to collaborate cross-functionally.
Experience providing audit evidence to comply with standards such as NIST, PCI, HIPPA, FERPA.
Exposure to complex IT web applications within the past 5 years.
Experience leading meetings and delivering oral and written reports.
Experience serving as a liaison between business and IT areas.
Experience creating supporting documentation for IT system audits.
Experience creating Disaster Recovery Plans, Business Continuity Plans, and Incident Response Plans.

Technologies

NIST Framework
NIST 800-53
NIST CSF
Authority to Operate (ATO)
System Security Plans (SSPs)
Disaster Recovery Plans (DRPs)
Plans of Action & Milestones (POA&Ms)
Incident Response Plans

Experience requirements (required):

NIST CSF, NIST 800-53: 5 years
Disaster Recovery Plans (DRPs): 5 years
Complex IT web Applications: 5 years

Job type: Contract

View full job page →

1mo ago

Cybersecurity Analyst - Intermediate

MBL Technologies Washington, DC

Washington, DC

1mo ago Closed

Full time Authority To Operate Cloud Cloud Platforms

This position is no longer accepting applications (closed Oct 24, 2026).

Job Description

MBL Technologies is seeking an Intermediate Cybersecurity Analyst to support cybersecurity architecture, engineering, risk management, and federal Assessment and Authorization activities.

Responsibilities

Support cybersecurity architecture, security engineering, and information assurance across federal information systems and cloud environments
Assist with design, implementation, assessment, and maintenance of cybersecurity solutions and security controls
Support IT and cloud design, security, development, systems engineering, and implementation across the system lifecycle
Participate in federal Assessment and Authorization (A&A) and Authority to Operate (ATO) activities
Support implementation and assessment of cybersecurity requirements aligned to Risk Management Framework (RMF) and FedRAMP
Review system architectures, technical documentation, and security requirements to identify cybersecurity risks, gaps, and improvement opportunities
Assist with developing and maintaining security documentation needed for authorization and compliance efforts
Collaborate with system owners, engineers, developers, cybersecurity personnel, and stakeholders to ensure security requirements are incorporated into design and implementation
Support assessments of security controls and remediation activities tied to vulnerabilities and compliance gaps
Monitor and evaluate compliance with applicable federal cybersecurity policies, processes, standards, and security requirements
Provide cybersecurity analysis, recommendations, and technical support to project teams and government stakeholders
Support continuous improvement efforts to strengthen system security, compliance, and overall cybersecurity posture

Requirements

Minimum 3 years of Information Security experience
Demonstrated experience with security architecture and security engineering
Experience supporting IT and cloud design, security, development, systems engineering, and implementation efforts
Experience with cybersecurity and security solutions in federal and/or commercial environments
Experience supporting federal Assessment and Authorization (A&A) and Authority to Operate (ATO) activities
Knowledge and experience with cybersecurity architecture, engineering, and authorization requirements, including FedRAMP and RMF
Strong understanding of applicable federal cybersecurity policies, processes, standards, and frameworks
Ability to analyze technical and security requirements and communicate findings and recommendations effectively
Strong written and verbal communication skills; ability to collaborate across technical and non-technical teams
Ability to obtain and maintain a High-Risk Public Trust clearance

Technologies

Assessment and Authorization (A&A)
Authority to Operate (ATO)
Risk Management Framework (RMF)
Federal Risk and Authorization Management Program (FedRAMP)

Education & Certification

Bachelor’s degree in business administration in Business Management, Cybersecurity, Computer Science, or Information Systems
Certification in one or more of the following:
- Information Assurance Technician (IAT) Level III
- Information Assurance Management (IAM) Level III
- Information Assurance System Architects and Engineers (IASAE) Level III
IAT III, IAM III, or IASAE III certification may be substituted for the relevant bachelor’s degree requirement or four years of relevant experience, as permitted by the position requirements

Preferred Qualifications

Experience supporting cybersecurity programs for federal government agencies
Experience with cloud security and security engineering in complex enterprise environments
Familiarity with federal cybersecurity governance, risk management, compliance, and authorization processes
Experience developing or maintaining security documentation supporting A&A, ATO, RMF, or FedRAMP activities
Ability to work effectively with government stakeholders, system owners, security teams, engineers, and other technical personnel

Benefits

Competitive salary adjusted for candidate qualifications
401K and 401(k) match
PTO
Remote work
Health and wellness programs
Employee discounts
Learning and development reimbursement
Incentive plans with corporate and individual-based performance bonuses
Professional development opportunities

Location

Washington, DC (onsite)

Military Occupational Specialty (MOS) Codes

170A
170D
17A
17B
17C
17D
24B
25B
47D
94F
IT
17 5309
6203
9735
9740
9890
9891

View full job page →

Authority To Operate Cybersecurity Jobs

IT Security Analyst

IT Security Analyst

Cybersecurity Analyst - Intermediate

Get Authority To Operate Cybersecurity Jobs alerts