IT Compliance & Information Security Analyst

Stefanini Group • Dearborn, MI

4d • Onsite

About The Position

Stefanini Group is hiring! Stefanini is looking for an IT Compliance & Information Security Analyst, Dearborn, MI (Onsite) For quick apply, please reach out Fardeen Ali at 248-582-6473/ [email protected] We are looking for a candidate who will review cybersecurity laws and policies and analyze its impact on organization. They develop security policies and procedures, review security controls and their efficiency, , and monitor processes for compliance risk and vulnerabilities. They also specialize in managing third party security risk programs

Requirements

• Risk Assessment, Risk Management, Compliance Professional, Auditing, Information Security
• Senior Specialist with 7+ experience in relevant field.
• Act as a subject matter expert for IT security, risk mitigation, and control implementation.
• Conduct targeted risk assessments aligning the company's security posture with state agency requirements.
• Evaluate risks of non-compliance and assess adherence to standards (e.g., NIST, CSF).
• Oversee the lifecycle of identified security deficiencies.
• Develop and document remediation plans for gaps in state-mandated controls.
• Communicate the organization's risk-handling strategy to state regulators.
• Interpret state cybersecurity regulations and frameworks (e.g., NYDFS, CCPA/CPRA).
• Prepare for "audit-ready" submissions by organizing necessary evidence to support questionnaire responses.
• Translate complex technical architectures into clear responses for state-level inquiries.
• Strategically consolidate global IT regulatory requirements.
• Work closely with Credit Privacy and Compliance Attorneys on IT regulatory requirements.
• Manage user stories and backlogs within JIRA to integrate compliance activities into the technology roadmap.

Responsibilities

• Advance company policy priorities on cybersecurity, cybercrime, lawful access, encryption, and related issues through legislative proposals, administrative, and regulatory actions
• Review and assess cybersecurity and cybercrime laws, policies, and initiatives and analyze impact on organization
• Develop security policies and procedures, drive development of technical solutions to implement policies, and manage third party security risk program including risk standards and processes.
• Advise, review, and ensure security controls and their efficiency for IT infrastructure deployed globally.
• Monitor processes for compliance risk and vulnerabilities and escalate non-compliance issues to key stakeholders.
• Establish and maintain good working relationships with government affairs and public policy representatives of other companies to achieve objectives

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees