Cybersecurity Business Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee the intake of items from ATO Managers and stakeholders.

• Gather requirements and perform process evaluations.

• Conduct analyses of both current and future states.

• Assist with Phase I assessment activities, including Current-State, Reporting, Training, AI Opportunity, and ServiceNow Ecosystem Assessments.

• Contribute to Phase II design and Phase III enterprise scaling.

• Create, document, and standardize security processes that support the use of the CAM Module across the organization.

• Establish repeatable CAM workflows that facilitate the inheritance of common controls into area segments.

• Lead the daily execution of the CAM Implementation transition plan, including RACI matrices.

• Collaborate with the Sr Cyber Security Engineer to implement and document control inheritance logic.

• Work alongside ISOs and the ATO program office to ensure process accuracy and foster adoption.

• Gather lessons learned and convert continuous improvement opportunities into process enhancements.

• Aid in audit preparedness through documentation traceability, version control, and accuracy.

• Act as a subject matter expert during training and office hours; co-facilitate select sessions with Training Developers.

• Provide insights to the ServiceNow Developer and PowerBI Engineer regarding process metrics and KPIs.

⛳️ Requirements

• A Bachelor's degree in Cybersecurity, Information Systems, Engineering, Mathematics, Business Administration, or a related field.

• A minimum of 5 years of experience in system security engineering, process design, or governance within an information security context.

• Familiarity with NIST SP 800-37 (RMF), NIST SP 800-53, and concepts of control inheritance.

• Practical experience with ServiceNow workflows (GRC, IRM, or CAM preferred).

• Security+ or an equivalent IAT II / IAM I certification.

• Preferred: CGRC (CAP), CISSP, or a similar certification.

• Preferred: Lean Six Sigma Green Belt or higher certification.

• Preferred: Experience with control inheritance modeling in large, complex organizations.

• Preferred: Previous experience with VA or federal RMF processes.

🏝️ Benefits

• Comprehensive benefits package.