Hybrid Cybersecurity Business Analyst: Bridging IT & Biz

ecsfederal; Virginia (MN); Hybrid; USD 120,000 - 140,000; Full time

Job summary

Everforth ECS in Arlington, VA, seeks a Cyber Business Analyst to bridge cybersecurity teams and business stakeholders in a hybrid role. The analyst gathers requirements, maps cybersecurity processes, and ensures alignment with risk and compliance goals.

Ideal candidate has 3+ years in BA or cybersecurity, familiarity with MITRE ATT&CK, and strong communication for cross-functional collaboration across Security Operations, Risk, Compliance, IT, and Leadership.

Qualifications

• Experience gathering and documenting business and technical requirements.
• Understanding of cybersecurity concepts, risk management and controls.
• Familiarity with MITRE ATT&CK Framework and traceability artifacts.
• Ability to translate technical concepts for non-technical audiences.
• Strong analytical, organizational, and presentation skills.

Responsibilities

• Partner with cybersecurity, IT, and business stakeholders to document and prioritize requirements.
• Facilitate workshops, interviews, and meetings to gather business and security needs.
• Develop BRDs, traceability artifacts, functional requirements, user stories, and use cases.
• Translate technical concepts into clear business language for non-technical audiences.
• Support cybersecurity initiatives across operations, governance, risk, and compliance.
• Plan, execute, and track cybersecurity projects and initiatives.
• Monitor milestones, risks, issues, dependencies, and deliverables.
• Ensure cybersecurity solutions align with business goals and regulatory requirements.
• Support creation of procedure-level TTP documentation (hunt and detection guidance).
• Assist in risk identification, assessment, and documentation.
• Support frameworks and standards such as CSF, NIST 800-53, ISO 27001, SOC 2, PCI-DSS, HIPAA, GDPR, MITRE ATT&CK.
• Analyze impacts of cybersecurity risks and control gaps; assist audits.
• Evaluate and optimize cybersecurity processes; suggest automation opportunities.
• Develop governance metrics, reporting, process maps, and SOPs.
• Gather security KPIs; develop dashboards and executive summaries.
• Act as liaison between technical teams and business stakeholders.
• Present findings and updates to management and leadership.

Skills

Requirements gathering

Stakeholder management

Cybersecurity knowledge

MITRE ATT&CK familiarity

Business process analysis

Data analysis & reporting

Communication skills

Problem-solving

Education

Bachelor's degree in Business Administration, Information Systems, Cybersecurity, Computer Science

Job description

Everforth ECS in Arlington, VA, seeks a Cyber Business Analyst to bridge cybersecurity teams and business stakeholders in a hybrid role. The analyst gathers requirements, maps cybersecurity processes, and ensures alignment with risk and compliance goals.

Ideal candidate has 3+ years in BA or cybersecurity, familiarity with MITRE ATT&CK, and strong communication for cross-functional collaboration across Security Operations, Risk, Compliance, IT, and Leadership.