Business Analyst (Security Arch)

Business Analyst (Security Arch)Location: Chicago, IL Experience: 10+ YearsWe are seeking a highly motivated Senior Business Analyst – Security Architecture to support strategic and operational initiatives across Identity & Access Management (IAM), Authentication, Authorization, Governance, Cloud Security, and AI-driven security domains. The ideal candidate will collaborate closely with security architects, engineering teams, business stakeholders, auditors, risk managers, and project teams to define requirements, improve business processes, and successfully deliver enterprise security initiatives.The successful candidate should possess excellent analytical, communication, and stakeholder management skills, along with a solid understanding of information security concepts and identity governance practices.Must-Have Technical/Functional Skills10+ years of Business Analyst experience supporting Information Security, IAM, or Cybersecurity programs.Strong understanding of Identity & Access Management (IAM) and Security Architecture.Experience gathering, documenting, and validating business, functional, and non-functional requirements.Knowledge of Authentication, Authorization, SSO, MFA, RBAC, PAM, IGA, Conditional Access, and Cloud Identity Management.Experience creating BRDs, FRDs, User Stories, Process Flow Diagrams, Data Models, and Reporting Requirements.Strong analytical, documentation, and stakeholder management skills.Experience working in Agile, Waterfall, or Hybrid delivery environments.Excellent written and verbal communication skills.Roles & ResponsibilitiesBusiness Analysis & Requirements ManagementGather, analyze, document, and validate business, functional, and non-functional requirements for IAM and security initiatives.Translate complex security and technical requirements into business requirements, user stories, and acceptance criteria.Conduct workshops and stakeholder meetings to gather requirements and align project priorities.Create business process flows, use cases, data flows, and process documentation.Support Agile, Waterfall, and Hybrid project delivery methodologies.Security & IAM Program SupportPartner with Security Architects and Engineering teams on initiatives involving: Authentication & AuthorizationSingle Sign-On (SSO)Multi-Factor Authentication (MFA)Identity Governance & Administration (IGA)Privileged Access Management (PAM)Role-Based Access Control (RBAC)Conditional AccessCloud Identity ManagementAI and Agentic Identity GovernanceDocument identity lifecycle processes, access review requirements, entitlement models, and governance controls.Support implementation and enhancement of security policies, standards, and procedures.Governance, Risk & ComplianceSupport audit readiness activities and evidence collection.Assist with regulatory and compliance assessments related to identity and access management.Track remediation activities, risk findings, and control improvements.Collaborate with Risk Management, Compliance, and Internal Audit teams.Data Analysis & ReportingAnalyze security, IAM, and operational data to identify trends, risks, and improvement opportunities.Develop dashboards, KPIs, metrics, and executive reports.Validate data quality and perform business impact analysis.Support performance reporting for enterprise security initiatives.Stakeholder ManagementAct as the liaison between business stakeholders, security teams, and technology organizations.Facilitate communication between technical and non-technical audiences.Support governance meetings, steering committee reporting, and executive presentations.Maintain project documentation and end-to-end requirements traceability.Required QualificationsBachelor's degree in Information Systems, Computer Science, Cybersecurity, Business Administration, or a related field.5+ years of Business Analysis experience supporting Information Security, IAM, or Technology programs.Experience working on security, cloud, or identity-related initiatives.Strong requirements gathering, documentation, and business process analysis experience.Excellent analytical, problem-solving, and organizational skills.Preferred QualificationsExperience with IAM platforms such as: Microsoft Entra IDOktaSailPointPing IdentitySaviyntKnowledge of Azure or AWS cloud security.Experience with Agile tools such as Jira, Azure DevOps, or ServiceNow.Familiarity with Identity Governance, PAM, Conditional Access, and Zero Trust security models.Certifications such as CBAP, PMI-PBA, Security+, or CISSP are a plus. AceStack LLC