Business Systems Analyst Consultant - Cybersecurity Controls

kallesgroup; Seattle (WA); Hybrid; USD 130,000 - 150,000; Full time

Benefits offered by this job

Medical, Dental, Vision plans

401K with matching

PTO

Job summary

Kalles Group is seeking a Business Systems Analyst Consultant for cybersecurity controls to support a large global philanthropic organization. You will turn risk and control objectives into clear, testable requirements, leading cross-functional sessions with cybersecurity, IT, engineering, and business stakeholders.

You will maintain end-to-end traceability from risk to control, requirements, implementation, tests, and validation, supporting IAM, Zero Trust, GRC, and cyber defense initiatives.

Qualifications

• 5+ years business systems/BA with cybersecurity or IT risk exposure.
• Gathering and documenting requirements across cybersecurity, engineering and business stakeholders.
• Supporting enterprise security initiatives (IAM, Zero Trust, GRC, vulnerability management).
• Translating risks and control objectives into system requirements, use cases and acceptance criteria.
• Strong analysis of workflows, access models, data flows and integrations.
• Excellent written/verbal communication bridging technical and non-technical audiences.

Responsibilities

• Lead requirements sessions with cybersecurity, IT, engineering and business stakeholders; document business, functional and technical requirements.
• Translate security risks and control objectives into functional requirements, use cases, user stories and acceptance criteria.
• Analyze workflows, access permissions, data flows and integrations to identify gaps and recommend solutions.
• Partner with architects and engineers on functional/technical requirements for implementation and integration.
• Maintain traceability across risks, controls, requirements, implementation, testing and validation evidence.
• Support security initiatives across IAM, Zero Trust, GRC, vulnerability management and cyber defense.
• Define test scenarios; support UAT and control validation; track defects and gaps to resolution.Produce audit-ready documentation and evidence for compliance reviews.
• Provide prioritization inputs to the PM and impact/adoption inputs to the Change Manager.

Skills

Business systems analysis

Cybersecurity exposure

IT risk programs

Requirements gathering

Tools

Jira

Azure DevOps

Confluence

GRC platforms

PAM

Job description

ABOUT KALLES GROUP:

Everyone deserves to be secure. Our mission at Kalles Group is to help secure the future for companies of all shapes and sizes.

While our expertise spans multiple disciplines, our method remains consistent: building trust and relationship with people -- whether you are a client, a consultant, or--in this case--a candidate.

No matter what role you come from--whether you're an executive or just starting your career-you can expect our highest level of attention and respect. We want to find the right fit for each role, but we also want you to find the right fit for your career.

We believe the best way to show you what our team is like is to treat you like you're already a part of it . We hope you'll consider joining our team of experienced professionals who are building their careers at Kalles Group-and having fun while doing it.

WHAT YOU WILL DO:

As the Business Systems Analyst Consultant for cybersecurity controls for our client (a large global philanthropic organization), you'll turn security risks and control objectives into clear, testable requirements. You'll lead requirements gathering across cybersecurity, IT, engineering, and business stakeholders. You'll analyze workflows, access permissions, data flows, and integrations to find security gaps. You'll maintain end-to-end traceability from risk to control, requirement, implementation, test results, and validation evidence, which gives the program accountability and keeps it ready for audit. You'll support initiatives across identity and access management (IAM), Zero Trust, governance, risk, and compliance (GRC), vulnerability management, and cyber defense. You'll also work closely with the program's Project Manager and Change Manager.

KEY RESPONSIBILITIES:

• Lead requirements sessions with cybersecurity, IT, engineering and business stakeholders; document business, functional and technical requirements.
• Translate security risks and control objectives into functional requirements, use cases, user stories and acceptance criteria.
• Analyze workflows, access permissions, data flows and integrations to identify gaps and recommend solutions.
• Partner with architects and engineers on functional/technical requirements for implementation and integration.
• Maintain traceability across risks, controls, requirements, implementation, testing and validation evidence.
• Support security initiatives across IAM, Zero Trust, GRC, vulnerability management and cyber defense.
• Define test scenarios; support UAT and control validation; track defects and gaps to resolution.Produce audit-ready documentation and evidence for compliance reviews.
• Provide prioritization inputs to the PM and impact/adoption inputs to the Change Manager.

ABOUT YOU:

• Integrity: You believe in doing the right thing, even when it's uncomfortable, seemingly inefficient, or costly.
• Purposefulness: You have a desire to serve others with your skillset and an openness to continuous learning and growth.
• Ownership: You stick to your commitments, follow up with action, and seek clarity in communication & expectations.

YOUR EXPERIENCE:

Required Qualifications

• 5+ years business systems/business analysis experience with significant cybersecurity or IT risk program exposure.
• Gathering and documenting requirements across cybersecurity, engineering and business stakeholders.
• Supporting enterprise security initiatives (IAM, Zero Trust, GRC, vulnerability management).
• Translating risks and control objectives into system requirements, use cases and acceptance criteria.
• Strong analysis of workflows, access models, data flows and integrations.
• Excellent written/verbal communication bridging technical and non-technical audiences.

Preferred Qualifications

• Requirements/traceability tools (Jira, Azure DevOps, Confluence, GRC platforms).
• Cloud environments (AWS, Azure, GCP)
• PAM or identity governance tools; data-flow diagramming.

WHAT WE OFFER:

• The annual salary range for this role is $130,000-$150,000.
• We offer Medical, Dental, Vision plans, 401K with matching, and PTO for salaried employees.
• Work/life balance - we know there's more to life than work! We encourage our team to pursue other passions, get outside, and spend time with family. We work with clients and consultants to set expectations for a manageable workload.

LOCATION:

This role is hybrid, requiring 1-2 days/week on-site at our client's location in Seattle, WA. Therefore, we are currently only considering candidates that are already living in the Seattle area.