Business Analyst

Job Description

Job Description

A Business Analyst to manage intake of items from ATO Managers and stakeholders, capture requirements, conduct process assessments, and perform current-state and future-state analysis. The BA is central to Phase I assessment activities (Current-State, Reporting, Training, AI Opportunity, and ServiceNow Ecosystem Assessments) and continue to support Phase II design and Phase III enterprise scale.

Key Responsibilities
• Design, document, and standardize the security processes that underpin the CAM Module's use across the enterprise.
• Ensure CAM workflows are clearly defined, repeatable, and properly support the inheritance of common controls into area segments.
• Lead day-to-day execution of the CAM Implementation transition plan content, including clearly defined roles and responsibilities (RACI matrices).
• Implement and document control inheritance logic in collaboration with the Sr Cyber Security Engineer, ensuring inherited controls properly flow from common control providers to area segments.
• Partner with ISOs and the ATO program office to validate process accuracy and drive consistent adoption.
• Collect lessons learned and continuous improvement opportunities from ATO Managers and translate them into process updates.
• Support audit readiness by ensuring documentation traceability, version control, and accuracy.
• Serve as a subject matter expert during training delivery and office hours; co-lead select sessions with the Training Developers.
• Provide input to the ServiceNow Developer and PowerBI Engineer on process metrics and KPIs.

Required Qualifications
• Bachelor's degree in Cybersecurity, Information Systems, Engineering, Mathematics, Business Administration or related field.
• 5 years of experience in system security engineering, process design, or governance within an information security function.
• Working knowledge of NIST SP 800-37 (RMF), NIST SP 800-53, and control inheritance concepts.
• Hands-on experience with ServiceNow workflows (GRC, IRM, or CAM strongly preferred).
• Security or equivalent IAT II / IAM I certification.

Preferred Qualifications
• CGRC (CAP), CISSP, or comparable certification.
• Lean Six Sigma Green Belt or higher.
• Experience with control inheritance modeling in large, complex enterprises.
• Prior VA or federal RMF experience.