Senior Business Analyst - Cyber Risk & GRC (Hybrid)

ecsfederal; Washington (District of Columbia); Hybrid; USD 130,000 - 147,000; Full time

Benefits offered by this job

Hybrid work in Washington, DC

Job summary

ECS Federal in Washington, DC is seeking a Senior Business Analyst to work in our hybrid office. This role supports cybersecurity programs across information systems under GRC governance, with a focus on compliance with federal laws and Department of State policies.

You will lead requirements analysis, document processes in SharePoint, and drive UAT and QA activities, mentoring junior analysts and coordinating with IT and business teams.

Qualifications

• Bachelor's degree in Computer Science, MIS/IT, Engineering, Information Security/Assurance, or related field.
• Minimum five (5) years of information security experience.
• Experience with full-scope technical security control testing and risk assessment plans.
• Working knowledge of RMF Steps 1-6 and NIST SP 800-53.

Responsibilities

• Lead development and implementation of cybersecurity processes and security assessment workflows.
• Document cybersecurity processes and SOPs in SharePoint and a GRC.
• Elicit, analyze, and document business requirements; translate needs into specs.
• Lead or mentor analysts and oversee UAT and QA activities.
• Provide governance support over common control projects and cloud onboarding.

Skills

Information security

RMF

NIST SP 800-53

NIST CSF

Risk assessment

Documentation

Communication

Education

Bachelor's degree in Computer Science, MIS/IT, Engineering, Information Security/Assurance, or related field

Tools

SharePoint

Job description

ECS Federal in Washington, DC is seeking a Senior Business Analyst to work in our hybrid office. This role supports cybersecurity programs across information systems under GRC governance, with a focus on compliance with federal laws and Department of State policies.

You will lead requirements analysis, document processes in SharePoint, and drive UAT and QA activities, mentoring junior analysts and coordinating with IT and business teams.