Business Analyst

Job Description

Job Description

Location: Quincy, MA (Hybrid)

Summary

EOHHS is seeking a Security IT Business Analyst to support the CISO Office by documenting, analyzing, and improving cybersecurity processes, policies, procedures, and governance activities. This role focuses on process analysis, technical writing, compliance documentation, audit readiness, and stakeholder collaboration.

Key Responsibilities

• Develop and maintain security policies, standards, SOPs, playbooks, runbooks, workflows, and process documentation.
• Analyze current security processes and identify gaps, risks, and improvement opportunities.
• Support security governance, compliance, and audit readiness initiatives.
• Facilitate discussions with security teams, IT staff, and business stakeholders.
• Create process maps, swim lane diagrams, dashboards, reports, and executive presentations.
• Document security requirements, risks, issues, decisions, and remediation activities.
• Develop future-state operational processes and security roadmaps.
• Support security awareness, training, and communication efforts.
• Assist with planning and tracking security projects and initiatives.

Required Qualifications

• 5-8 years of IT or Cybersecurity experience.
• 3+ years as a Business Analyst, Process Analyst, Technical Writer, Security Analyst, or similar role.
• Experience documenting security policies, procedures, workflows, SOPs, playbooks, and runbooks.
• Strong process analysis, requirements gathering, and stakeholder management skills.
• Excellent writing, documentation, communication, and presentation skills.
• Experience supporting audit, compliance, or governance initiatives.

Preferred Qualifications

• Experience working within a CISO organization.
• Knowledge of:
  • NIST Cybersecurity Framework (CSF)
  • CIS Controls
  • ISO 27001
• Healthcare or Government experience.
• Experience with governance, risk, and compliance (GRC) processes.

Core Skills

Security Governance | Cybersecurity Documentation | Process Analysis | Technical Writing | NIST CSF | CIS Controls | ISO 27001 | SOP Development | Requirements Gathering | Risk & Compliance | Audit Readiness | Process Improvement | Stakeholder Management | Executive Reporting