Business Analyst (Security Arch

Business Analyst (Security Arch)

Location:

Chicago, IL

Experience:

10+ Years

We are seeking a highly motivated Senior Business Analyst – Security Architecture to support strategic and operational initiatives across Identity & Access Management (IAM), Authentication, Authorization, Governance, Cloud Security, and AI-driven security domains. The ideal candidate will collaborate closely with security architects, engineering teams, business stakeholders, auditors, risk managers, and project teams to define requirements, improve business processes, and successfully deliver enterprise security initiatives.

The successful candidate should possess excellent analytical, communication, and stakeholder management skills, along with a solid understanding of information security concepts and identity governance practices.

Must-Have Technical/Functional Skills

• 10+ years of Business Analyst experience supporting Information Security, IAM, or Cybersecurity programs.
• Strong understanding of Identity & Access Management (IAM) and Security Architecture.
• Experience gathering, documenting, and validating business, functional, and non-functional requirements.
• Knowledge of Authentication, Authorization, SSO, MFA, RBAC, PAM, IGA, Conditional Access, and Cloud Identity Management.
• Experience creating BRDs, FRDs, User Stories, Process Flow Diagrams, Data Models, and Reporting Requirements.
• Strong analytical, documentation, and stakeholder management skills.
• Experience working in Agile, Waterfall, or Hybrid delivery environments.
• Excellent written and verbal communication skills.

Roles & Responsibilities

Business Analysis & Requirements Management

• Gather, analyze, document, and validate business, functional, and non-functional requirements for IAM and security initiatives.
• Translate complex security and technical requirements into business requirements, user stories, and acceptance criteria.
• Conduct workshops and stakeholder meetings to gather requirements and align project priorities.
• Create business process flows, use cases, data flows, and process documentation.
• Support Agile, Waterfall, and Hybrid project delivery methodologies.

Security & IAM Program Support

• Partner with Security Architects and Engineering teams on initiatives involving:
  • Authentication & Authorization
  • Single Sign-On (SSO)
  • Multi-Factor Authentication (MFA)
  • Identity Governance & Administration (IGA)
  • Privileged Access Management (PAM)
  • Role-Based Access Control (RBAC)
  • Conditional Access
  • Cloud Identity Management
  • AI and Agentic Identity Governance
• Document identity lifecycle processes, access review requirements, entitlement models, and governance controls.
• Support implementation and enhancement of security policies, standards, and procedures.

Governance, Risk & Compliance

• Support audit readiness activities and evidence collection.
• Assist with regulatory and compliance assessments related to identity and access management.
• Track remediation activities, risk findings, and control improvements.
• Collaborate with Risk Management, Compliance, and Internal Audit teams.

Data Analysis & Reporting

• Analyze security, IAM, and operational data to identify trends, risks, and improvement opportunities.
• Develop dashboards, KPIs, metrics, and executive reports.
• Validate data quality and perform business impact analysis.
• Support performance reporting for enterprise security initiatives.

Stakeholder Management

• Act as the liaison between business stakeholders, security teams, and technology organizations.
• Facilitate communication between technical and non-technical audiences.
• Support governance meetings, steering committee reporting, and executive presentations.
• Maintain project documentation and end-to-end requirements traceability.

Required Qualifications

• Bachelor's degree in Information Systems, Computer Science, Cybersecurity, Business Administration, or a related field.
• 5+ years of Business Analysis experience supporting Information Security, IAM, or Technology programs.
• Experience working on security, cloud, or identity-related initiatives.
• Strong requirements gathering, documentation, and business process analysis experience.
• Excellent analytical, problem-solving, and organizational skills.

Preferred Qualifications

• Experience with IAM platforms such as:
  • Microsoft Entra
  • Okta
  • Sail Point
  • Ping Identity
  • Saviynt
• Knowledge of Azure or AWS cloud security.
• Experience with Agile tools such as Jira, Azure Dev Ops, or Service Now.
• Familiarity with Identity Governance, PAM, Conditional Access, and Zero Trust security models.
• Certifications such as CBAP, PMI-PBA, Security+, or CISSP are a plus.