Business Analyst

Job Title: Business AnalystDuration: 4 MonthsLocation: Albany, NYPosition Type: ContractDirect End Client: State of New York, Department of Taxation and Finance (DTF)Job Description:The Business Analyst will be responsible for supporting the Risk Management Office within the New York State Department of Taxation and Finance (DTF). The primary responsibility is to evaluate and revise existing policies and procedures pertaining to information technology (IT) and information security risk management, specifically to align with the IRS Publication 1075 requirements based on NIST (National Institute of Standards and Technology) guidance.Key responsibilities will include reviewing and analyzing current IT and DTF policies and procedures related to risk assessment, identifying gaps in compliance with IRS Publication 1075, and preparing updated policies and procedures to meet these requirements. The position requires collaboration with team members to implement the new or amended policies. Responsibilities: Evaluate Existing Policies:Review and evaluate current Information Technology Services (ITS) and DTF policies related to risk assessment and management.Ensure that policies and procedures adhere to IRS Publication 1075 requirements for information security.Gap Analysis:Identify gaps between existing policies and the requirements set forth in IRS Publication 1075.Analyze current systems and processes to determine where changes or updates are needed.Prepare Policies and Procedures:Draft new risk assessment policies and procedures, or amend existing ones, to align with the IRS Publication 1075 requirements.Ensure that the updated policies reflect the necessary NIST guidelines and security best practices.Implementation Support:Participate in the implementation of new or amended policies and procedures.Provide support to various teams during the roll-out and ensure proper documentation is created and maintained.Collaboration with Stakeholders:Work closely with stakeholders in the Risk Management Office, IT departments, and other relevant teams to ensure alignment on policies and procedures.Present findings and recommendations to management for approval and further action.Required Qualifications:Experience:60 months (5 years) of experience with information technology and information security risk management.36 months (3 years) of experience analyzing, preparing, and amending policies and procedures related to information technology and information security risk management.Education:Bachelor's Degree in Business Administration, Computer Science, Information Technology, or a related field.Certifications:Project Management Certification (e.g., PMP, CAPM) is preferred.Skills:Risk Assessment and Risk Management expertise, particularly within the context of IRS Publication 1075 and NIST frameworks.Excellent analytical and problem-solving skills to assess and interpret complex policies and procedures.Strong communication skills to collaborate with cross-functional teams and present findings clearly.Experience with policy development, documentation, and implementation.Proficiency in Microsoft Office (Word, Excel, PowerPoint, Outlook).Preferred Qualifications:Experience working with state or government agencies, especially in the taxation or finance sectors.Familiarity with NIST cybersecurity frameworks and other compliance regulations (such as FISMA or FIPS).Physical Requirements:This position is based in Albany, NY, and may require occasional travel for meetings or site visits.