Business Impact & Information Security Analyst

Join us to co-create solutions for a better future! Job Details

Information Technology

Business Impact & Information Security Analyst

Atlanta, GA

Posted:8/26/2026

Job #: 64756

Job Category:
Information Technology

Position Type:
Contract

Duration: 6+ months

Remaining Positions: 1

Stefanini Group is hiring! Stefanini is looking for Business Impact & Information Security Analyst in Atlanta, GA For quick apply, please contact Sudhanshu Shrivastava;
Ph:  Sudhan W2 Candidates Only!

About Role:
We are seeking a versatile Business Impact & Information Security Analyst to join our enterprise risk management team. This dual-focused role combines business continuity planning with cybersecurity operations, making it ideal for a well-rounded contractor who can bridge operational resilience and information security. The successful candidate will assess organizational vulnerabilities from both business impact and security threat perspectives, ensuring comprehensive protection of critical assets and operations.

• Lead structured interviews and collaborative workshops with department heads and key stakeholders to identify critical business functions, security requirements, and risk exposure
• Map critical business functions, workflows, technical dependencies, and security control touchpoints across the organization
• Document operational interdependencies, assess security control effectiveness, and identify single points of failure from both continuity and security perspectives
• Research and analyze emerging cyber threats, vulnerabilities, and attack vectors; assess relevance to organizational operations and business continuity

• Evaluate and assign severity scores to potential disruption scenarios resulting from system failures, supply chain outages, or security incidents
• Assess financial, operational, legal, and reputational consequences tied to business disruptions and security breaches
• Develop integrated risk matrices and impact classification frameworks that address both continuity and security risks
• Correlate security events and threat intelligence with business impact scenarios
• Contribute to threat modeling exercises for critical systems and functions

• Evaluate effectiveness of existing security controls and countermeasures through testing aligned with frameworks (NIST, ISO 27001, CIS)
• Review system configurations against security baselines and hardening standards
• Assess cloud security configurations and compliance (AWS, Azure, GCP)
• Define Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO) for core applications and business units, factoring in security restoration requirements
• Establish prioritization criteria for recovery sequencing that incorporates security validation steps
• Collaborate with IT, operations, and security teams to validate feasibility of recovery targets and security controls

• Assist with security and business continuity audits; provide evidence of control implementation
• Maintain comprehensive documentation including policies, procedures, runbooks, security controls, and business impact profiles
• Track and report on security metrics, business continuity KPIs, and integrated risk indicators
• Synthesize analytical findings into executive-ready dashboards and presentations
• Deliver integrated continuity strategies and security recommendations to senior leadership
• Maintain updated documentation in alignment with organizational and regulatory standards

• Bachelor's Degree or 4 years equivalent experience;
  Bachelor's Degree preferred in Business Administration, Information Technology, Cybersecurity, Risk Management, Data Science, or related field
• Master's degree or additional certifications preferred

• 3-5 years of experience

• Proven proficiency in business impact analysis methodologies and frameworks
• Strong understanding of risk assessment principles and practices
• Experience with supply chain dependency analysis

• Solid understanding of cybersecurity principles, frameworks, and best practices
• Knowledge of common attack vectors, vulnerabilities, and mitigation techniques
  
  Experience with security incident investigation and response procedures
• Understanding of network protocols, system architecture, and security technologies

• Exceptional…