Business Systems Analyst Consultant - Cybersecurity Controls

ABOUT KALLES GROUP:

Everyone deserves to be secure. Our mission at Kalles Group is to help secure the future for companies of all shapes and sizes.

While our expertise spans multiple disciplines, our method remains consistent: building trust and relationship with people -- whether you are a client, a consultant, or--in this case--a candidate.

No matter what role you come from--whether you're an executive or just starting your career-you can expect our highest level of attention and respect. We want to find the right fit for each role, but we also want you to find the right fit for your career.

We believe the best way to show you what our team is like is to treat you like you're already a part of it. We hope you'll consider joining our team of experienced professionals who are building their careers at Kalles Group—and having fun while doing it.

WHAT YOU WILL DO:

As the Business Systems Analyst Consultant for cybersecurity controls for our client (a large global philanthropic organization), you’ll turn security risks and control objectives into clear, testable requirements. You’ll lead requirements gathering across cybersecurity, IT, engineering, and business stakeholders. You’ll analyze workflows, access permissions, data flows, and integrations to find security gaps. You’ll maintain end-to-end traceability from risk to control, requirement, implementation, test results, and validation evidence, which gives the program accountability and keeps it ready for audit.

You’ll support initiatives across identity and access management (IAM), Zero Trust, governance, risk, and compliance (GRC), vulnerability management, and cyber defense. You’ll also work closely with the program’s Project Manager and Change Manager.

KEY RESPONSIBILITIES:

• Lead requirements sessions with cybersecurity, IT, engineering and business stakeholders; document business, functional and technical requirements.
• Translate security risks and control objectives into functional requirements, use cases, user stories and acceptance criteria.
• Analyze workflows, access permissions, data flows and integrations to identify gaps and recommend solutions.
• Partner with architects and engineers on functional/technical requirements for implementation and integration.
• Maintain traceability across risks, controls, requirements, implementation, testing and validation evidence.
• Support security initiatives across IAM, Zero Trust, GRC, vulnerability management and cyber defense.
• Define test scenarios; support UAT and control validation; track defects and gaps to resolution.
• Produce audit-ready documentation and evidence for compliance reviews.
• Provide prioritization inputs to the PM and impact/adoption inputs to the Change Manager.

ABOUT YOU:

Your values:

Integrity:
You believe in doing the right thing, even when it's uncomfortable, seemingly inefficient, or costly.

Purposefulness:
You have a desire to serve others with your skillset and an openness to continuous learning and growth.

Ownership:
You stick to your commitments, follow up with action, and seek clarity in communication & expectations.

YOUR

EXPERIENCE:

Required Qualifications
• 5+ years business systems/business analysis experience with significant cybersecurity or IT risk program exposure.
• Gathering and documenting requirements across cybersecurity, engineering and business stakeholders.
• Supporting enterprise security initiatives (IAM, Zero Trust, GRC, vulnerability management).
• Translating risks and control objectives into system requirements, use cases and acceptance criteria.
• Strong analysis of workflows, access models, data flows and integrations.
• Excellent written/verbal communication bridging technical and non-technical audiences.

Preferred Qualifications Requirements/trace…