Business Analyst (Security Arch) - 426067

Position: Business Analyst (Security Arch)

Locations: Chicago IL (Onsite Position from day one)

Duration: Fulltime

Must Have Technical/Functional Skills

• Experience working with security, cloud, or identity-related initiatives.
• Strong requirements gathering, documentation, and stakeholder management skills.
• Experience creating:

• Business Requirements Documents (BRDs)
• Functional Requirements Documents (FRDs)
• User Stories and Acceptance Criteria
• Process Flow Diagrams
• Data Models and Reporting Requirements

• Strong analytical, problem-solving, and organizational skills.
• Excellent written and verbal communication skills.

Good to have

• Experience with IAM platforms such as Microsoft Entra ID, Okta, SailPoint, Ping, Saviynt, or similar solutions.
• Familiarity with security technologies including MFA, SSO, Conditional Access, PAM, and Identity Governance.
• Experience supporting cloud security initiatives within Azure or AWS environments.
• Working knowledge of Agile methodologies and tools such as Jira, Azure DevOps, or ServiceNow.
• Certifications such as:

• CBAP o PMI-PBA
• Security+
• Certified Identity and Access Manager (CIAM)
• CISSP (or progress toward certification)
• Microsoft Security Certifications

Roles & Responsibilities

Business Analysis & Requirements Management

• Elicit, analyze, document, and validate business, functional, and non-functional requirements for security and IAM initiatives.
• Translate complex security and technical requirements into clear business requirements and user stories.
• Facilitate workshops and stakeholder discussions to gather requirements and align priorities.
• Create business process flows, use cases, data flows, and process documentation.
• Support Agile, Waterfall, and hybrid delivery methodologies.

Security & IAM Program Support

• Partner with security architects and engineering teams on initiatives involving:

Authentication and Authorization

• Single Sign-On (SSO)
• Multi-Factor Authentication (MFA)
• Identity Governance and Administration (IGA)
• Privileged Access Management (PAM)
• Role-Based Access Control (RBAC)
• Conditional Access
• Cloud Identity Management
• AI and Agentic Identity Governance

• Assist in documenting identity lifecycle processes, access review requirements, entitlement models, and governance controls.
• Support implementation and enhancement of security policies, standards, and procedures.

Governance, Risk & Compliance

• Assist in audit readiness activities and evidence collection.
• Support regulatory and compliance assessments related to identity and access management.
• Track remediation activities, risk findings, and control improvements.
• Collaborate with Risk Management, Compliance, and Internal Audit teams.

Data Analysis & Reporting

• Analyze security, IAM, and operational data to identify trends, risks, and improvement opportunities.
• Develop dashboards, metrics, and executive reporting materials.
• Support KPI, KRI, and performance reporting for security initiatives.
• Perform data validation, quality assessments, and business impact analysis.

Stakeholder Management

• Act as a liaison between business stakeholders, security teams, and technology organizations
• Facilitate communication across technical and non-technical audiences.
• Support program governance, steering committee reporting, and executive presentations.
• Manage project documentation and maintain requirement traceability