Business Systems Analyst Consultant - Cybersecurity Controls
Core
Translate security risks and control objectives into clear, testable requirements and maintain end-to-end traceability for audit readiness.
Role type
Senior Business Systems Analyst (Cybersecurity Controls)
Builds
Functional requirements, use cases, user stories, and acceptance criteria for security initiatives
Domain
Cybersecurity, Governance, Risk, and Compliance (GRC)
Required skills
Requirements gathering and documentation, Workflow analysis, Access permission modeling, Data flow analysis, Integration analysis, Test scenario definition, UAT support, Audit documentation
Preferred skills
Requirements/traceability tools (Jira, Azure DevOps, Confluence, GRC platforms), Cloud environments (AWS, Azure, GCP), PAM or identity governance tools, Data-flow diagramming
Responsibilities
Lead requirements sessions with cybersecurity, IT, engineering, and business stakeholders; Translate security risks and control objectives into functional requirements, use cases, user stories, and acceptance criteria; Analyze workflows, access permissions, data flows, and integrations to identify gaps and recommend solutions; Partner with architects and engineers on functional/technical requirements; Maintain traceability across risks, controls, requirements, implementation, testing, and validation evidence; Support security initiatives across IAM, Zero Trust, GRC, vulnerability management, and cyber defense; Define test scenarios, support UAT and control validation, track defects and gaps to resolution; Produce audit-ready documentation and evidence for compliance reviews
Seniority
Senior, hands-on IC
