Business Analyst - Senior

Primary Talent Partners; Columbus (OH); On-site; USD 79,000 - 92,000; Full time

Job summary

Primary Talent Partners in Columbus, OH, seeks a Senior Business Analyst to support enterprise security, risk, and compliance across large initiatives for a gas and electric company. This 12-month contract requires coordination with IT, cybersecurity, compliance, audit, and service providers to ensure security controls and data protection design.

The role emphasizes risk assessment, control definition and validation, evidence for audits, and alignment with regulatory requirements throughout

Qualifications

• Experience in large multi-year transformation programs focusing on enterprise security, risk, and controls.
• Utilities industry experience strongly preferred.
• Experience with Big 4 integrators and SAP environments preferred.
• Must be local to Central OH.

Responsibilities

• Manage own schedule with stakeholders and teams with limited supervision.
• Support early risk and security assessments for initiatives (security, compliance, access, data protection).
• Plan controls, document objectives, evaluate current-state processes, ensure security and compliance in project plans.
• Facilitate sessions to align stakeholders on security requirements, data protection, and evidence needs.
• Elicit requirements and verify regulatory obligations and access needs at project level.
• Maintain traceability of security requirements through design, build, testing, deployment, and handoff.
• Provide guidance on security and controls to project teams and service providers.

Skills

Enterprise security

Risk management

Compliance

Controls design

Security governance

Stakeholder management

Leadership guidance

Big4/SAP experience

Education

Bachelor's degree or equivalent work experience

Tools

SAP

Job description

Primary Talent Partners has a new contract opening for a Business Analyst - Senior to join a gas and electric company in Columbus, OH. This is a 12-month contract to start with the potential for extensions.

Pay:

$57.00 - $67.00/hr; W2 contract, no PTO, no Benefits. ACA-compliant supplemental package available for enrollment. Candidates must be legally authorized to work in the United States and must be able to sit on Primary Talent Partners W2 without sponsorship.

Description:

• This role reports to the Enterprise Security Director and is responsible for supporting enterprise security, controls, risk, and compliance activities across large business and technology initiatives.
• The role partners with business, IT, cybersecurity, compliance, audit, and service provider teams to identify, document, and validate security and control requirements throughout the project lifecycle.
• This position helps ensure solutions are designed and delivered with appropriate access controls, data protection, regulatory alignment, audit readiness, and sustainable control ownership.
• Individuals at this level are expected to work independently, apply risk-based judgment, and provide guidance to project teams and service providers on security and controls expectations.

Principal Duties and Responsibilities:

• Manage own schedule of work and partner with stakeholders, subject matter experts, cybersecurity teams, compliance teams, and service providers with limited supervision
• Risk and Security Assessment - support early review of business and technology initiatives to identify security, compliance, access, data protection, and control considerations that may affect scope, design, delivery, or operational readiness
• Security and Controls Planning - collaborate with business and IT teams to identify required controls, document control objectives, evaluate current-state processes, and ensure security and compliance requirements are incorporated into project plans and solution designs
• Definition and Design - facilitate or support working sessions to align stakeholders on security requirements, control design, data protection needs, access models, compliance expectations, and evidence requirements
• Requirements and Controls Elicitation - lead or support engagements to define security, compliance, and control requirements, including business process impacts, regulatory obligations, system access needs, and project-level control expectations
• Controls Traceability and Documentation - maintain traceability of security and control requirements through design, build, testing, deployment, and operational transition using appropriate tools, templates, and evidence repositories
• Solution Assessment and Control Validation - engage with key stakeholders to review proposed designs, assess control coverage, identify gaps or risks, support remediation planning, and confirm that security and compliance expectations are addressed before implementation
• Delivery and Deployment - provide consultation on security and control requirements, assess change requests for risk and compliance impacts, support test planning for control validation, and help ensure appropriate evidence is captured for audit and operational handoff
• Provide guidance, leadership, and direction to project team members, service providers, and less experienced analysts on security, controls, compliance, and risk-management expectations
• Use standard templates, tools, and internal processes consistently to document risks, controls, decisions, issues, evidence, and remediation actions; recommend improvements to security and control processes as needed
• Work with vendors and service providers to review proposed products, designs, and deliverables for security, compliance, usability, and control alignment; participate in RFI/RFP activities by defining or reviewing security and controls requirements
• Develop domain knowledge of assigned systems, products, security processes, and control frameworks; prepare clear procedures, guidance, and communications to support secure adoption, operational readiness, and control ownership transition
• Observe and evaluate business and technology processes to identify opportunities to strengthen security, improve control effectiveness, reduce operational or compliance risk, and support sustainable process improvements
• Other duties assigned by management.

Qualifications:

• Experience supporting large multi-year transformation programs with a focus on enterprise security, risk, compliance, and internal controls.
• Utilities industry experience strongly preferred.
• Experience working with Big 4 solution integrators and SAP environments preferred.
• Must be local to Central OH.

Required Qualifications for Position

• Bachelor's degree or equivalent work experience
• Minimum 3+ years of experience supporting security, controls, compliance, risk management, or technology governance activities within complex business or IT programs
• Demonstrated understanding of control design, control validation, access management, data protection, regulatory requirements, and secure solution delivery
• Experience with all phases of the Systems Development Lifecycle (SDLC), including Waterfall, agile, and/or hybrid methodologies, with emphasis on embedding security and controls into project delivery
• Demonstrated knowledge of risk assessment practices, control documentation, process evaluation, issue tracking, and remediation support
• Ability to partner with business, IT, cybersecurity, audit, compliance, and service provider teams to identify security and control requirements
• Strong collaboration, communication, organizational, stakeholder-management, and conflict-resolution skills
• Experience working closely with service providers and reviewing vendor deliverables for security, compliance, and control expectations
• Excellent analytical, risk-based thinking, and problem-solving skills

Preferred Qualifications for Position:

• Utility experience
• Experience with hybrid agile/iterative development methodologies
• Familiarity with SAP security, identity and access management, cybersecurity governance, regulatory compliance, audit readiness,