Cybersecurity Business Analyst: Policies, Runbooks & Compliance

RESOURCESOFT, INC.; Quincy (MA); On-site; USD 100,000 - 140,000; Full time

Job summary

Resourcesoft, Inc. in Marlborough, MA, is seeking a cybersecurity business analyst to capture and optimize enterprise security processes.

The role involves transforming security practices into auditable workflows, and shaping governance, SOPs, and runbooks to support audit readiness and regulatory compliance. The candidate will partner with technical SMEs, translate complex security concepts into actionable artifacts, and deliver dashboards and executive-ready reports.

Qualifications

• 5+ years of experience in cybersecurity business analysis and process documentation.
• Proficiency with enterprise security frameworks including NIST CSF, CIS Controls, and ISO 27001.
• Experience designing complex operational workflows and swim lane diagrams.
• Experience developing standard operating procedures, technical playbooks, and disaster recovery runbooks.
• Experience conducting rigorous gap analyses to identify and mitigate operational cybersecurity risks.
• Experience supporting enterprise IT governance, regulatory compliance, and audit readiness operations.
• Excellent verbal and written communication skills to interview technical subject matter experts effectively.

Responsibilities

• Author and maintain comprehensive enterprise security policies, standard operating procedures, and technical runbooks.
• Analyze current-state cybersecurity processes to identify inefficiencies and formulate future-state operational roadmaps.
• Translate undocumented IT security practices into structured, highly auditable workflows and technical artifacts.
• Execute rigorous security reviews and gap analyses to ensure strict alignment with industry compliance frameworks.
• Produce detailed technical dashboards, progress reports, and executive presentations for senior cybersecurity leadership.
• Facilitate cross-functional collaborations to standardize security operations across diverse enterprise technology environments.
• Develop and deploy targeted training materials to drive the organizational adoption of newly documented security practices.

Skills

Cybersecurity domain knowledge

Security frameworks

Process documentation

Communication skills

Job description

Resourcesoft, Inc. in Marlborough, MA, is seeking a cybersecurity business analyst to capture and optimize enterprise security processes.

The role involves transforming security practices into auditable workflows, and shaping governance, SOPs, and runbooks to support audit readiness and regulatory compliance. The candidate will partner with technical SMEs, translate complex security concepts into actionable artifacts, and deliver dashboards and executive-ready reports.