Business Systems Analyst Consultant - Cybersecurity Controls

This role serves a client’s security program by converting cybersecurity risks and control objectives into clear, testable business system requirements, with end-to-end traceability to support audit readiness. You will lead cross-functional requirements work across cybersecurity, IT, engineering, and business stakeholders while supporting initiatives spanning multiple security domains.

Location and Work Model

Seattle, WA (hybrid). This position requires 1-2 days per week on-site at the client’s location in Seattle, WA. Only candidates already living in the Seattle area are being considered.

Compensation

USD 130,000 - 150,000 per year.

Key Responsibilities

• Lead requirements sessions with cybersecurity, IT, engineering, and business stakeholders; document business, functional, and technical requirements.
• Translate security risks and control objectives into functional requirements, use cases, user stories, and acceptance criteria.
• Analyze workflows, access permissions, data flows, and integrations to identify gaps and recommend solutions.
• Partner with architects and engineers to define functional and technical requirements for implementation and integration.
• Maintain traceability across risks, controls, requirements, implementation, testing, and validation evidence.
• Support security initiatives across IAM, Zero Trust, GRC, vulnerability management, and cyber defense.
• Define test scenarios; support UAT and control validation; track defects and gaps to resolution.
• Produce audit-ready documentation and evidence for compliance reviews.
• Provide prioritization inputs to the PM and impact/adoption inputs to the Change Manager.

Required Qualifications

• 5+ years of business systems/business analysis experience, including significant exposure to cybersecurity or IT risk programs.
• Experience gathering and documenting requirements across cybersecurity, engineering, and business stakeholders.
• Experience supporting enterprise security initiatives such as IAM, Zero Trust, GRC, and vulnerability management.
• Ability to translate risks and control objectives into system requirements, use cases, and acceptance criteria.
• Strong analytical skills across workflows, access models, data flows, and integrations.
• Excellent written and verbal communication to bridge technical and non-technical audiences.

Technologies

• Jira
• Azure DevOps
• Confluence
• GRC platforms
• AWS, Azure, GCP

Benefits

• Medical, Dental, Vision plans
• 401K with matching
• PTO for salaried employees
• Work/life balance

Preferred Qualifications

• Experience with requirements and traceability tools (Jira, Azure DevOps, Confluence, GRC platforms).
• Experience with cloud environments (AWS, Azure, GCP).
• Familiarity with PAM or identity governance tools, plus data-flow diagramming.