Everforth ECS is seeking a Cyber Business Analyst to join our team in Arlington, VA (Hybrid). This position is contingent upon award.
We are seeking a detail-oriented and strategic Cyber Business Analyst to serve as the bridge between cybersecurity teams and business stakeholders. This role is responsible for gathering requirements, analyzing cybersecurity processes, supporting security initiatives, and ensuring business objectives align with organizational security and risk management goals.
The ideal candidate will possess a blend of business analysis expertise, cybersecurity knowledge, stakeholder management skills, and experience translating technical requirements into business-focused solutions. This individual will work closely with Security Operations, Risk Management, Compliance, IT, and Business Leadership teams to drive cybersecurity programs and projects.
Key Responsibilities
Business Analysis & Requirements Gathering
- Partner with cybersecurity, IT, and business stakeholders to identify, document, and prioritize business and security requirements.
- Facilitate workshops, interviews, and stakeholder meetings to understand business needs and cybersecurity objectives.
- Develop business requirements documents (BRDs), MITRE ATT&CK Framework traceability artifacts, functional requirements, user stories, process flows, and use cases.
- Translate complex technical concepts into clear business language for non-technical audiences.
Cybersecurity Program Support
- Support cybersecurity initiatives including security operations, governance, risk management, compliance, identity management, vulnerability management, and incident response.
- Assist in the planning, execution, and tracking of cybersecurity projects and strategic initiatives.
- Monitor program milestones, risks, issues, dependencies, and deliverables.
- Ensure cybersecurity solutions align with business goals and regulatory requirements.
- Support development of procedure-level TTP documentation – to include hunt and detection guidance.
Risk & Compliance Analysis
- Assist in identifying, assessing, and documenting cybersecurity risks.
- Support regulatory and compliance initiatives related to frameworks and standards such as:
- NIST Cybersecurity Framework (CSF)
- NIST 800-53
- ISO 27001
- SOC 2
- PCI-DSS
- HIPAA
- GDPR
- MITRE ATT&CK
- Analyze business impacts associated with cybersecurity risks and control gaps.
- Support audit preparation and remediation efforts.
Process Improvement
- Evaluate existing cybersecurity processes and identify opportunities for optimization and automation.
- Analyze security workflows and recommend improvements to increase operational efficiency.
- Assist in developing governance processes, metrics, and reporting capabilities.
- Create and maintain process documentation and standard operating procedures (SOPs).
Data Analysis & Reporting
- Gather and analyze security-related metrics and key performance indicators (KPIs).
- Develop dashboards, reports, and executive summaries for leadership review.
- Track cybersecurity program performance and communicate progress to stakeholders.
- Support risk reporting, compliance reporting, and operational metrics analysis.
Stakeholder Engagement
- Act as a liaison between technical cybersecurity teams and business stakeholders.
- Facilitate communication across project teams to ensure successful delivery of cybersecurity initiatives.
- Support change management and user adoption efforts for new security processes and technologies.
- Present findings, recommendations, and project updates to management and leadership.
Salary Range: $120,000-$140,000
General Description of Benefits
Preferred Qualifications
- Active Top Secret (TS) clearance.
- Bachelor's degree in Business Administration, Information Systems, Cybersecurity, Computer Science, or a related field.
- 3+ years of experience as a Business Analyst, Cybersecurity Analyst, IT Analyst, or related role.
- Familiarity with MITRE ATT&CK Framework and experience developing ATT&CK traceability and/or mapping artifacts.
- Understanding of cybersecurity concepts, risk management, and information security controls.
- Experience gathering and documenting business and technical requirements.
- Strong analytical, organizational, and problem-solving skills.
- Experience creating process maps, workflows, business cases, and requirements documentation.
- Excellent written, verbal, and presentation communication skills.
- Ability to work effectively with both technical and non-technical stakeholders.
Skills Required
- Active Top Secret clearance
- Bachelor's degree in Business Administration, Information Systems, Cybersecurity, Computer Science, or a related field
- 3+ years of experience as a Business Analyst, Cybersecurity Analyst, IT Analyst, or in a related role
- Familiarity with the MITRE ATT&CK Framework and experience developing ATT&CK traceability or mapping artifacts
- Understanding of cybersecurity concepts, risk management, and information security controls
- Experience gathering and documenting business and technical requirements
- Strong analytical, organizational, and problem-solving skills
- Experience creating process maps, workflows, business cases, and requirements documentation
- Excellent written, verbal, and presentation communication skills
- Ability to work effectively with technical and non-technical stakeholders
ECS Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about ECS and has not been reviewed or approved by ECS.
-
Healthcare Strength — ECS advertises multiple national-network medical plan options with HSA eligibility alongside dental and vision coverage. Coverage generally begins quickly and is paired with company-paid short- and long-term disability, adding stability to the health package.
-
Retirement Support — A 401(k) with Safe Harbor and immediate vesting on employer contributions is emphasized, with an employer match available. Access to an employee stock purchase plan via the parent company provides an additional savings avenue.
-
Parental & Family Support — Paid parental leave up to 30 days, adoption assistance, and other family-oriented leaves are highlighted. Feedback suggests these offerings add meaningful value beyond base pay for many roles.
ECS Insights
What We Do
ECS, a segment of ASGN (NYSE: ASGN), delivers advanced solutions and services in cloud, cybersecurity, artificial intelligence (AI), machine learning (ML), application and IT modernization, and science and engineering. The company solves critical, complex challenges for customers across the U.S. public sector, defense, intelligence and commercial industries. ECS maintains partnerships with leading cloud, cybersecurity, and AI/ML providers and holds specialized certifications in their technologies. Headquartered in Fairfax, Virginia, ECS has more than 3,400 employees throughout the U.S. and has been recognized as a Top Workplace by The Washington Post for the last five years.
