Cyber Business Analyst: Bridge Security & Strategy

ECS Corporate Services; Arlington (VA); Hybrid; USD 120,000 - 140,000; Full time

Benefits offered by this job

Active Top Secret clearance

Job summary

Everforth ECS is seeking a Cyber Business Analyst to join our Arlington, VA team in a hybrid setting. You will bridge cybersecurity teams and business stakeholders, gathering requirements and translating technical concepts into business language.

The role supports security programs, risk management, and compliance efforts, working with Security Operations, Risk Management, Compliance, IT, and Leadership to drive cybersecurity initiatives.

Qualifications

• Bachelor's degree in a related field is required.
• Experience gathering and documenting business and security requirements.
• Familiarity with MITRE ATT&CK Framework and traceability artifacts.
• Strong analytical, organizational, and problem-solving abilities.

Responsibilities

• Partner with cybersecurity, IT, and business stakeholders to identify, document, and prioritize business and security requirements.
• Facilitate workshops, interviews, and stakeholder meetings to understand needs and cybersecurity objectives.
• Develop BRDs, ATT&CK traceability artifacts, functional requirements, user stories, and use cases.
• Translate technical concepts into clear business language for non-technical audiences.
• Support cybersecurity initiatives across security operations, governance, risk management, and compliance.

Skills

Analytical thinking

Stakeholder mgmt

Requirements gathering

Business-IT liaison

Communication skills

Education

Bachelor's degree in Business Administration, Information Systems, Cybersecurity, Computer Science, or related field

Tools

MITRE ATT&CK Framework

Job description

Everforth ECS is seeking a Cyber Business Analyst to join our Arlington, VA team in a hybrid setting. You will bridge cybersecurity teams and business stakeholders, gathering requirements and translating technical concepts into business language.

The role supports security programs, risk management, and compliance efforts, working with Security Operations, Risk Management, Compliance, IT, and Leadership to drive cybersecurity initiatives.