Business Systems Analyst Consultant - Cybersecurity Controls

As the Business Systems Analyst Consultant for cybersecurity controls for our client (a large global philanthropic organization), you’ll turn security risks and control objectives into clear, testable requirements. You’ll lead requirements gathering across cybersecurity, IT, engineering, and business stakeholders. You’ll analyze workflows, access permissions, data flows, and integrations to find security gaps. You’ll maintain end-to-end traceability from risk to control, requirement, implementation, test results, and validation evidence, which gives the program accountability and keeps it ready for audit. You’ll support initiatives across identity and access management (IAM), Zero Trust, governance, risk, and compliance (GRC), vulnerability management, and cyber defense. You’ll also work closely with the program’s Project Manager and Change Manager.

KEY RESPONSIBILITIES:

• Lead requirements sessions with cybersecurity, IT, engineering and business stakeholders; document business, functional and technical requirements.

• Translate security risks and control objectives into functional requirements, use cases, user stories and acceptance criteria.

• Analyze workflows, access permissions, data flows and integrations to identify gaps and recommend solutions.

• Partner with architects and engineers on functional/technical requirements for implementation and integration.

• Maintain traceability across risks, controls, requirements, implementation, testing and validation evidence.

• Support security initiatives across IAM, Zero Trust, GRC, vulnerability management and cyber defense.

• Define test scenarios; support UAT and control validation; track defects and gaps to resolution.

• Produce audit-ready documentation and evidence for compliance reviews.

• Provide prioritization inputs to the PM and impact/adoption inputs to the Change Manager.

ABOUT YOU:

Your values:

Integrity: You believe in doing the right thing, even when it's uncomfortable, seemingly inefficient, or costly.

Purposefulness: You have a desire to serve others with your skillset and an openness to continuous learning and growth.

Ownership: You stick to your commitments, follow up with action, and seek clarity in communication & expectations.

YOUR EXPERIENCE:

Required Qualifications

• 5+ years business systems/business analysis experience with significant cybersecurity or IT risk program exposure.

• Gathering and documenting requirements across cybersecurity, engineering and business stakeholders.

• Supporting enterprise security initiatives (IAM, Zero Trust, GRC, vulnerability management).

• Translating risks and control objectives into system requirements, use cases and acceptance criteria.

• Strong analysis of workflows, access models, data flows and integrations.

• Excellent written/verbal communication bridging technical and non-technical audiences.

Preferred Qualifications

Requirements/traceability tools (Jira, Azure DevOps, Confluence, GRC platforms).

Cloud environments (AWS, Azure, GCP)

PAM or identity governance tools; data-flow diagramming.

WHAT WE OFFER:

The annual salary range for this role is $130,000-$150,000.

We offer Medical, Dental, Vision plans, 401K with matching, and PTO for salaried employees.

Work/life balance – we know there’s more to life than work! We encourage our team to pursue other passions, get outside, and spend time with family. We work with clients and consultants to set expectations for a manageable workload.

LOCATION:

This role is on-site at our client's location in Seattle, WA.  Therefore, we are currently only considering candidates that are already living in the Seattle area.