Cybersecurity Business Analyst: Bridge IT & Biz (Hybrid)

ECS

Arlington (VA)

Hybrid

USD 120,000 - 140,000

Full time

14 days+

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Job summary

Everforth ECS in Arlington, VA (Hybrid) is seeking a Technical Business Analyst to join our team. This role bridges cybersecurity teams and business stakeholders, gathering requirements and translating technical needs into secure, business-focused solutions.

You will work with Security Operations, Risk Management, Compliance, IT and Leadership to drive cybersecurity programs, monitor KPIs, and ensure alignment with regulatory requirements and organizational goals.

Qualifications

Bachelor's degree in Business Administration, Information Systems, Cybersecurity, Computer Science, or a related field.
U.S. citizen with an ability to obtain and maintain a Public Trust Suitability.
3+ years of experience as a Business Analyst, Cybersecurity Analyst, IT Analyst, or related role.
Understanding of cybersecurity concepts, risk management, and information security controls.
Experience gathering and documenting business and technical requirements.
Strong analytical, organizational, and problem-solving skills.
Experience creating process maps, workflows, business cases, and requirements documentation.
Excellent written, verbal, and presentation communication skills.
Ability to work effectively with both technical and non-technical stakeholders.

Responsibilities

Partner with cybersecurity, IT, and business stakeholders to identify, document, and prioritize business and security requirements.
Facilitate workshops, interviews, and stakeholder meetings to understand business needs and cybersecurity objectives.
Develop BRDs, traceability artifacts, functional requirements, user stories, process flows, and use cases.
Translate complex technical concepts into clear business language for non-technical audiences.
Support cybersecurity initiatives including security operations, governance, risk management, compliance, identity management, vulnerability management, and incident response.
Assist in planning, execution, and tracking of cybersecurity projects and strategic initiatives.
Monitor program milestones, risks, issues, dependencies, and deliverables.
Ensure cybersecurity solutions align with business goals and regulatory requirements.
Evaluate existing cybersecurity processes and identify opportunities for optimization and automation.
Analyze security workflows and recommend improvements to increase operational efficiency.
Assist in developing governance processes, metrics, and reporting capabilities.
Create and maintain process documentation and SOPs.
Gather and analyze security-related metrics and KPIs.
Develop dashboards, reports, and executive summaries for leadership review.
Track cybersecurity program performance and communicate progress to stakeholders.
Support risk reporting, compliance reporting, and operational metrics analysis.
Act as a liaison between technical cybersecurity teams and business stakeholders.
Facilitate communication across project teams to ensure successful delivery of cybersecurity initiatives.
Support change management and user adoption efforts for new security processes and technologies.
Present findings, recommendations, and project updates to management and leadership.