IT Security BA

IT Security BA

Hybrid in Quincy MA

• 8 years of IT/Cybersecurity experience
• 3+ years as a Business Analyst, Process Analyst, Technical Writer, or Security Analyst
• Strong security process documentation (policies, SOPs, playbooks, runbooks, workflows)
• Experience with requirements gathering and stakeholder interviews
• Ability to analyze and improve security processes
• Knowledge of NIST CSF, CIS Controls, and ISO 27001
• Experience supporting security governance, compliance, and audits
• Excellent written communication and presentation skills
• Experience creating process maps, flowcharts, and swim lane diagrams.

• Support the EOHHS CISO Office with security operations and governance initiatives
• Document and improve security policies, procedures, SOPs, playbooks, and workflows
• Conduct process analysis to identify gaps, risks, and improvement opportunities
• Work closely with security teams, IT teams, and agency stakeholders
• Create process maps, swim lane diagrams, reports, dashboards, and presentations
• Support security compliance, audit readiness, and governance activities
• Gather and document business and security requirements
• Track security projects, risks, issues, and decisions
• Develop future-state processes and operational roadmaps
• Help create security training and communications
• Translate undocumented security practices into repeatable, auditable processes.