Business Systems Analyst Consultant - Cybersecurity Controls

Kalles Group•Seattle, WA

1d•Hybrid

About The Position

Kalles Group is hiring a Business Systems Analyst Consultant to support cybersecurity controls for a large global philanthropic organization. The role turns security risks and control objectives into clear, testable requirements and leads requirements gathering across cybersecurity, IT, engineering, and business stakeholders. It analyzes workflows, access permissions, data flows, and integrations to identify security gaps, and maintains traceability from risks and controls through requirements, implementation, testing, and validation evidence to support accountability and audit readiness. The consultant supports initiatives spanning identity and access management (IAM), Zero Trust, governance, risk, and compliance (GRC), vulnerability management, and cyber defense. The position works closely with the program’s Project Manager and Change Manager. It is hybrid, with 1–2 days per week onsite at the client’s location in Seattle, Washington; candidates must already live in the Seattle area.

Requirements

At least 5 years of business systems or business analysis experience with significant cybersecurity or IT risk program exposure.
Experience gathering and documenting requirements across cybersecurity, engineering, and business stakeholders.
Experience supporting enterprise security initiatives such as IAM, Zero Trust, GRC, or vulnerability management.
Ability to translate risks and control objectives into system requirements, use cases, and acceptance criteria.
Strong ability to analyze workflows, access models, data flows, and integrations.
Excellent written and verbal communication skills, including the ability to bridge technical and non-technical audiences.
Must already live in the Seattle area.

Nice To Haves

Experience with requirements or traceability tools such as Jira, Azure DevOps, Confluence, or GRC platforms.
Experience with cloud environments such as AWS, Azure, or GCP.
Experience with PAM or identity governance tools.
Experience with data-flow diagramming.

Responsibilities

Lead requirements sessions with cybersecurity, IT, engineering, and business stakeholders; document business, functional, and technical requirements.
Translate security risks and control objectives into functional requirements, use cases, user stories, and acceptance criteria.
Analyze workflows, access permissions, data flows, and integrations to identify gaps and recommend solutions.
Partner with architects and engineers on functional and technical requirements for implementation and integration.
Maintain traceability across risks, controls, requirements, implementation, testing, and validation evidence.
Support security initiatives across IAM, Zero Trust, GRC, vulnerability management, and cyber defense.
Define test scenarios; support UAT and control validation; track defects and gaps through resolution.
Produce audit-ready documentation and evidence for compliance reviews.
Provide prioritization inputs to the Project Manager and impact/adoption inputs to the Change Manager.