Senior Cybersecurity Business Analyst – Hybrid DC

ECS Corporate Services; Washington (District of Columbia); Hybrid; USD 130,000 - 147,000; Full time

Job summary

ECS Corporate Services in Washington, DC offers a Senior Business Analyst role in a hybrid office setting. You will lead cybersecurity process development, document SOPs, elicit and translate business requirements, and collaborate with IT and business units through the project lifecycle.

You will develop business cases, perform risk analyses, and support U.S. government standards, including RMF and NIST controls. Active clearance is implied; prior security experience is valued.

Qualifications

• Bachelor's degree in Computer Science, MIS/IT, Engineering, Information Security/Assurance, or a related field.
• Minimum five (5) years of information security experience.
• Demonstrated experience with NIST SP 800-53 controls and RMF.
• Ability to translate business needs into functional specifications and use cases.

Responsibilities

• Lead development and implementation of cybersecurity processes and workflows in a GRC environment.
• Document processes and SOPs in SharePoint and a GRC.
• Elicit, analyze, and document business requirements and translate them into use cases.
• Conduct data and process analysis to identify improvement opportunities.
• Develop business cases, cost/benefit analyses, and strategic recommendations.
• Oversee UAT and QA activities and coordinate vendor management when required.

Skills

Cybersecurity

GRC processes

Requirements analysis

Data analysis

UAT

Vendor management

Cloud onboarding

Education

Bachelor's degree in Computer Science, MIS/IT, Engineering, Information Security/Assurance, or a related field

Tools

SharePoint

GRC application

Job description

ECS Corporate Services in Washington, DC offers a Senior Business Analyst role in a hybrid office setting. You will lead cybersecurity process development, document SOPs, elicit and translate business requirements, and collaborate with IT and business units through the project lifecycle.

You will develop business cases, perform risk analyses, and support U.S. government standards, including RMF and NIST controls. Active clearance is implied; prior security experience is valued.