Senior Analyst, Cybersecurity

Ensemble Health Partners•Cincinnati, OH

2d•Remote

About The Position

The Senior Analyst, Cybersecurity (Quality Assurance & Business Analysis) will play an essential role in safeguarding the quality, reliability, and integrity of Ensemble's internal security systems and tools, serving as the first line of defense against defects, control gaps, and process risks before they reach production. This role will partner with Information Security, IT, and business unit leadership to gather and validate requirements, execute rigorous testing across security platforms and internal applications, and support the successful, on-time delivery of security-related initiatives and enhancements.

Requirements

Bachelor's Degree
5–7+ years of experience in Quality Assurance, Business Analysis, or a related technical role
Proficient with QA methodologies, testing tools, and defect tracking/test management platforms (e.g., Jira, Azure DevOps, TestRail).
Working knowledge of SQL for data validation and troubleshooting.
Experience gathering and documenting business requirements and translating them into functional specifications and acceptance criteria.
Experience coordinating small- to mid-size projects, including UAT cycles and release readiness.
Strong written and verbal communication skills; comfortable working with both technical and non-technical stakeholders.
Exceptional organizational and problem-solving skills, time management, and ability to prioritize deliverables.
Requires regular interaction with internal senior leaders and cross-functional teams.
Must reside and be authorized to work within the United States.

Nice To Haves

Bachelor's Degree in Information Security, Computer Science, Information Systems, or related field
Cybersecurity experience is a plus — familiarity with security tooling (SIEM, vulnerability scanners, GRC/compliance platforms), security concepts (access control, audit logging, secure SDLC), or a compliance-driven environment.
Exposure to compliance frameworks such as SOC 2, ISO 27001, or NIST is a plus.

Responsibilities

Own the QA process for internal cybersecurity tools and platforms (e.g., SIEM, vulnerability management, GRC/compliance systems, and identity and access management) from test planning through sign-off.
Develop and maintain test plans, test cases, and regression suites for new features, system changes, and security tool upgrades.
Perform manual functional, regression, integration, and user acceptance testing; identify, document, and track defects to resolution.
Develop a risk-based test approach that prioritizes coverage based on business and security impact, in alignment with departmentally defined review methodology.
Validate data integrity, access controls, and business logic across system changes, upgrades, and migrations.
Assess control weaknesses identified during testing, make recommendations for improvement, and assist in the formal reporting of deficiencies.
Establish and report on QA metrics (defect density, escape rate, test coverage) to communicate system quality trends to leadership.
Develop a thorough understanding of business processes in scope for assigned systems and document the processes in flowcharts and process narratives.
Gather, document, and validate business requirements from Information Security and internal stakeholders for system changes, enhancements, and new tools.
Translate business and security needs into clear functional specifications, user stories, and acceptance criteria for engineering and QA.
Facilitate requirements workshops and stakeholder interviews across departments; serve as the liaison between business users and technical teams.
Help plan and track timelines, milestones, and dependencies for small- to mid-size security system initiatives.
Coordinate user acceptance testing cycles, release readiness checklists, and go-live activities; keep stakeholders informed on status, risks, and blockers.
Maintain current knowledge of cybersecurity best practices, compliance standards, and other general technical and business matters relevant to the role.