Business Analyst

Published: 6/14/2022

Job Description

Job DescriptionLocation: Quincy, MA (Hybrid)

Summary

EOHHS is seeking a Security IT Business Analyst to support the CISO Office by documenting, analyzing, and improving cybersecurity processes, policies, procedures, and governance activities. This role focuses on process analysis, technical writing, compliance documentation, audit readiness, and stakeholder collaboration.

Key Responsibilities

Develop and maintain security policies, standards, SOPs, playbooks, runbooks, workflows, and process documentation.
Analyze current security processes and identify gaps, risks, and improvement opportunities.
Support security governance, compliance, and audit readiness initiatives.
Facilitate discussions with security teams, IT staff, and business stakeholders.
Create process maps, swim lane diagrams, dashboards, reports, and executive presentations.
Document security requirements, risks, issues, decisions, and remediation activities.
Develop future-state operational processes and security roadmaps.
Support security awareness, training, and communication efforts.
Assist with planning and tracking security projects and initiatives.

Required Qualifications

5-8 years of IT or Cybersecurity experience.
3+ years as a Business Analyst, Process Analyst, Technical Writer, Security Analyst, or similar role.
Experience documenting security policies, procedures, workflows, SOPs, playbooks, and runbooks.
Strong process analysis, requirements gathering, and stakeholder management skills.
Excellent writing, documentation, communication, and presentation skills.
Experience supporting audit, compliance, or governance initiatives.

Preferred Qualifications

Experience working within a CISO organization.
Knowledge of:
- NIST Cybersecurity Framework (CSF)
- CIS Controls
- ISO 27001
Healthcare or Government experience.
Experience with governance, risk, and compliance (GRC) processes.