Business Systems Analyst Consultant - Cybersecurity Controls
About The Position
Kalles Group is hiring a Business Systems Analyst Consultant to support cybersecurity controls for a large global philanthropic organization. The role translates security risks and control objectives into clear, testable requirements and leads requirements gathering across cybersecurity, IT, engineering, and business stakeholders. It analyzes workflows, access permissions, data flows, and integrations to identify security gaps, and maintains traceability from risks and controls through requirements, implementation, testing, and validation evidence to support accountability and audit readiness. The consultant supports initiatives across identity and access management (IAM), Zero Trust, governance, risk, and compliance (GRC), vulnerability management, and cyber defense. The role also works closely with the program’s Project Manager and Change Manager, helping with prioritization and change-impact inputs. The position is on-site at the client’s Seattle, Washington location, and candidates must already live in the Seattle area.
Requirements
- At least 5 years of business systems or business analysis experience with significant cybersecurity or IT risk program exposure.
- Experience gathering and documenting requirements across cybersecurity, engineering, and business stakeholders.
- Experience supporting enterprise security initiatives such as IAM, Zero Trust, GRC, or vulnerability management.
- Ability to translate risks and control objectives into system requirements, use cases, and acceptance criteria.
- Strong analytical skills involving workflows, access models, data flows, and integrations.
- Excellent written and verbal communication skills for bridging technical and non-technical audiences.
- Must already live in the Seattle area, as the role is on-site at the client’s location.
Nice To Haves
- Experience with requirements or traceability tools such as Jira, Azure DevOps, Confluence, or GRC platforms.
- Experience with cloud environments such as AWS, Azure, or GCP.
- Experience with PAM or identity governance tools.
- Experience with data-flow diagramming.
Responsibilities
- Lead requirements sessions with cybersecurity, IT, engineering, and business stakeholders; document business, functional, and technical requirements.
- Translate security risks and control objectives into functional requirements, use cases, user stories, and acceptance criteria.
- Analyze workflows, access permissions, data flows, and integrations to identify gaps and recommend solutions.
- Partner with architects and engineers on functional and technical requirements for implementation and integration.
- Maintain traceability across risks, controls, requirements, implementation, testing, and validation evidence.
- Support security initiatives across IAM, Zero Trust, GRC, vulnerability management, and cyber defense.
- Define test scenarios; support UAT and control validation; track defects and gaps through resolution.
- Produce audit-ready documentation and evidence for compliance reviews.
- Provide prioritization inputs to the Project Manager and impact/adoption inputs to the Change Manager.
Benefits
- Medical, dental, and vision plans.
- 401(k) with matching.
- PTO for salaried employees.
- A focus on work/life balance and a manageable workload.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
No Education Listed
