Departmental Specialist 13 (Security / Privacy Specialist)

State of Michigan•Lansing, MI

3d•Hybrid

About The Position

The Michigan Department of Corrections (MDOC) is seeking an Information Security and Privacy Specialist for the Office of Research and Planning, Data Security and Privacy unit. This role supports the Michigan Department of Corrections (MDOC) Security Accreditation Process (MiSAP). The specialist will act as the lead subject matter expert for coordinating the development, integration, research, evaluation, and recommendation of security controls, business process flows, and standards to maintain the confidentiality, integrity, and availability of MDOC data during the Security Accreditation Process (MiSAP). This position provides expert-level oversight of MDOC’s completion and maintenance of System Security Plans for department-wide applications, ensuring alignment with existing DTMB-implemented technical controls and statewide security requirements. The specialist will interpret SOM IT Technical Standards, NIST 800-53, HIPAA, CJIS, and other required regulations, policies, and frameworks using the State of Michigan’s GRC tool, documentation, and other materials. This position serves as the liaison to DTMB, contracted vendors, and MDOC staff for designated business areas. Additionally, the specialist will function as the subject matter expert for internal, State, or Federal audits, providing outreach to IT and non-IT staff, data collection, exception handling, and conducting presentations on relevant security and privacy topics within the work area.

Requirements

Possession of a bachelor's degree in any major.
Four years of professional experience, including two years equivalent to the experienced (P11) level or one year equivalent to the advanced (12) level.
Thorough knowledge of advanced principles, concepts, techniques, and best practices of information security.
Knowledge of the disciplines of information security.
Ability to prepare and develop reports, document findings, and provide information.
Knowledge of MDOC software applications, security database applications and how they are used by Department staff in the performance of their job functions according to Department policy and procedure.
Knowledge of the operational and technical problems involved in the administration of a specialized program.
Knowledge of the assigned program specialty.
Knowledge of methods of planning, developing, and administering programs.
Knowledge of state and federal laws and legislative processes related to the work.
Knowledge of the need, preparation, and use of reports.
Ability to plan, direct, and coordinate programs and administrative activities of a complex, interrelated and interdependent nature, where unknown and numerous contingency factors are involved.
Ability to formulate policies and procedures relevant to program areas based on information of a conceptual nature from varied and complex sources.
Ability to plan, coordinate, and expedite work projects.
Ability to interpret complex rules and regulations.
Ability to communicate with others verbally and in writing.
Attach a cover letter and resume'.

Nice To Haves

Alternative experience qualifications of nonprofessional experience, previously identified by the appointing authority and approved by Civil Service, will be accepted as a substitute for the required classified, professional experience for the classification. The nonprofessional experience must be related to departmental programs and services that provide the required knowledge, skills, and abilities. Individuals appointed must possess the department-specific alternative experience for positions within that agency only.
MDOC Experience ONLY Applicants must possess a bachelor’s degree and the experience listed below OR two additional years of the stated experience to substitute for the degree.
Two years of MDOC experience as an Assistant Resident Unit Supervisor 11, Corrections Shift Supervisor 11, Departmental Supervisor 11, Food Services Supervisor 11, Corrections Shift Supervisor 12, Departmental Supervisor 12, Fire Safety Supervisor 12, Industries Supervisor 12, or Medical Records Examiner Supervisor 12.

Responsibilities

Coordinate the development, integration, research, evaluation, and recommendation of security controls, business process flows, and standards.
Maintain the confidentiality, integrity, and availability of Michigan Department of Corrections (MDOC) data during the Security Accreditation Process (MiSAP).
Provide expert-level oversight of MDOC’s completion and maintenance of System Security Plans for department-wide applications.
Ensure alignment with existing DTMB-implemented technical controls and statewide security requirements.
Interpret SOM IT Technical Standards, NIST 800-53, HIPAA, CJIS, and other required regulations, policies, and frameworks.
Serve as the liaison to DTMB, contracted vendors, and MDOC staff for designated business areas.
Function as the subject matter expert for internal, State, or Federal audits.
Provide outreach to IT and non-IT staff.
Handle data collection and exception handling for audits.
Conduct presentations on relevant security and privacy topics within the work area.