Security Analyst

IT Security BA Hybrid in Quincy MA Top Must-Haves: 8 years of IT/Cybersecurity experience 3+ years as a Business Analyst, Process Analyst, Technical Writer, or Security Analyst Strong security process documentation (policies, SOPs, playbooks, runbooks, workflows) Experience with requirements gathering and stakeholder interviews Ability to analyze and improve security processes Knowledge of NIST CSF, CIS Controls, and ISO 27001 Experience supporting security governance, compliance, and audits Excellent written communication and presentation skills Experience creating process maps, flowcharts, and swim lane diagrams. Project Details: Support the EOHHS CISO Office with security operations and governance initiatives Document and improve security policies, procedures, SOPs, playbooks, and workflows Conduct process analysis to identify gaps, risks, and improvement opportunities Work closely with security teams, IT teams, and agency stakeholders Create process maps, swim lane diagrams, reports, dashboards, and presentations Support security compliance, audit readiness, and governance activities Gather and document business and security requirements Track security projects, risks, issues, and decisions Develop future-state processes and operational roadmaps Help create security training and communications Translate undocumented security practices into repeatable, auditable processes. #J-18808-Ljbffr