Cybersecurity Business Analyst

CAM Business Analyst

Pay Rate: $60,000 annually with full benefits

Position Overview

A Business Analyst to manage intake of items from ATO Managers and stakeholders, capture requirements, conduct process assessments, and perform current-state and future-state analysis. The BA is central to Phase I assessment activities (Current-State, Reporting, Training, AI Opportunity, and ServiceNow Ecosystem Assessments) and continues to support Phase II design and Phase III enterprise scale.

Key Responsibilities

Design, document, and standardize the security processes that underpin the CAM Module's use across the enterprise.

Ensure CAM workflows are clearly defined, repeatable, and properly support the inheritance of common controls into area segments.

Lead day-to-day execution of the CAM Implementation transition plan content, including clearly defined roles and responsibilities (RACI matrices).

Implement and document control inheritance logic in collaboration with the Sr Cyber Security Engineer, ensuring inherited controls properly flow from common control providers to area segments.

Partner with ISOs and the ATO program office to validate process accuracy and drive consistent adoption.

Collect lessons learned and continuous improvement opportunities from ATO Managers and translate them into process updates.

Support audit readiness by ensuring documentation traceability, version control, and accuracy.

Serve as a subject matter expert during training delivery and office hours; co-lead select sessions with the Training Developers.

Provide input to the ServiceNow Developer and PowerBI Engineer on process metrics and KPIs.

Required Qualifications

Bachelor's degree in Cybersecurity, Information Systems, Engineering, Mathematics, Business Administration or related field.

5+ years of experience in system security engineering, process design, or governance within an information security function.

Working knowledge of NIST SP 800-37 (RMF), NIST SP 800-53, and control inheritance concepts.

Hands-on experience with ServiceNow workflows (GRC, IRM, or CAM strongly preferred).

Security+ or equivalent IAT II / IAM I certification.

Preferred Qualifications

CGRC (CAP), CISSP, or comparable certification.

Lean Six Sigma Green Belt or higher.

Experience with control inheritance modeling in large, complex enterprises.

Prior VA or federal RMF experience.