Remote Cybersecurity Business Analyst (VA ESOM - CAM)

Kentro • UNAVAILABLE, UNAVAILABLE

13d • Remote

About The Position

Kentro is seeking a Business Analyst to manage the intake of items from ATO Managers and stakeholders, capture requirements, conduct process assessments, and perform current-state and future-state analysis. The BA is central to Phase I assessment activities (Current-State, Reporting, Training, AI Opportunity, and ServiceNow Ecosystem Assessments) and will continue to support Phase II design and Phase III enterprise scale. This position can be performed remotely within the United States and will support Eastern Time working hours.

Requirements

• Bachelor's degree in Engineering, mathematics, business administration OR an additional 8 years of relevant experience in lieu of the degree requirement.
• 5+ years of experience in system security engineering, process design, or governance within an information security function.
• Working knowledge of NIST SP 800-37 (RMF), NIST SP 800-53, and control inheritance concepts.
• Hands-on experience with ServiceNow workflows (GRC, IRM, or CAM strongly preferred).
• Security+ or equivalent IAT II / IAM I certification.
• US Citizen or Green card holder
• Willing and able to obtain and maintain Public Trust Clearance
• Must meet updated ID requirements

Nice To Haves

• CGRC (CAP), CISSP, or comparable certification.
• Lean Six Sigma Green Belt or higher.
• Experience with control inheritance modeling in large, complex enterprises.
• Prior VA or federal RMF experience.

Responsibilities

• Design, document, and standardize the security processes that underpin the CAM Module's use across the enterprise.
• Ensure CAM workflows are clearly defined, repeatable, and properly support the inheritance of common controls into area segments.
• Lead day-to-day execution of the CAM Implementation transition plan content, including clearly defined roles and responsibilities (RACI matrices).
• Implement and document control inheritance logic in collaboration with the Sr Cyber Security Engineer, ensuring inherited controls properly flow from common control providers to area segments.
• Partner with ISOs and the ATO program office to validate process accuracy and drive consistent adoption.
• Collect lessons learned and continuous improvement opportunities from ATO Managers and translate them into process updates.
• Support audit readiness by ensuring documentation traceability, version control, and accuracy.
• Serve as a subject matter expert during training delivery and office hours; co-lead select sessions with the Training Developers.
• Provide input to the ServiceNow Developer and PowerBI Engineer on process metrics and KPIs.

Benefits

• Paid time off
• Healthcare benefits
• Supplemental benefits
• 401k including an employer match
• Discount perks
• Rewards
• Education reimbursement for certifications, degrees, or professional development
• Flexibility for courses, certifications, or professional growth and networking
• Funds for activities – virtual and in-person (happy hours, holiday events, fitness & wellness events, annual celebrations)
• Charity galas/events

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level