Security & Risk Analyst: Enterprise Cybersecurity

CompQsoft Inc; New York (NY); Hybrid; USD 110,000 - 150,000; Full time

Job summary

CompQsoft Inc., based in New York, seeks an experienced Security Business Analyst to translate CISO priorities into clear requirements and drive risk-informed decisions. You will work with stakeholders across Security Operations, Infrastructure, Cloud, and GRC to document controls and support remediation efforts.

The role emphasizes bridging business and technical teams, developing BRDs and workflow artifacts, and contributing to dashboards and executive risk summaries.

Qualifications

• 5+ years of experience as a Security Business Analyst or similar.
• Experience translating regulatory and security priorities into actionable requirements.
• Strong knowledge of NIST RMF, FISMA, HIPAA, FERPA, and related controls.
• Proficient with BRDs, process flows, gap analyses, and control mapping.
• Experience with risk and POA&M management, dashboards, executive reporting.

Responsibilities

• Serve as a Security Business Analyst supporting cybersecurity and IT risk initiatives, translating priorities into requirements.
• Elicit, analyze, and document security and risk requirements across security operations, infrastructure, cloud, data protection, GRC, privacy.
• Support risk and POA&M management activities, tracking remediation plans and ensuring regulatory alignment.
• Act as a liaison between business stakeholders, technical teams, and senior leadership on risks and controls.
• Develop and maintain BRDs, process flows, gap analyses, and control mappings.
• Provide analytic support for executive reporting, dashboards, risk trends, and remediation progress.
• Enable delivery of measurable security outcomes, identifying gaps and ensuring solutions meet objectives.
• Expertise in gathering, modeling and workflow development.

Skills

JIRA

Confluence

MS Visio

Lucidchart

MS Project

SQL Query

MS Power BI

Archer/ServiceNow (GRC)

MS Office

Tools

JIRA

Confluence

MS Visio

Lucidchart

MS Project

SQL Query

MS Power BI

Archer/ServiceNow (GRC)

MS Office

Job description

CompQsoft Inc., based in New York, seeks an experienced Security Business Analyst to translate CISO priorities into clear requirements and drive risk-informed decisions. You will work with stakeholders across Security Operations, Infrastructure, Cloud, and GRC to document controls and support remediation efforts.

The role emphasizes bridging business and technical teams, developing BRDs and workflow artifacts, and contributing to dashboards and executive risk summaries.