The Role
Lead development and implementation of cybersecurity processes and security assessment workflows in a GRC; document SOPs in SharePoint; elicit and translate business requirements; perform data/process modeling and risk-based analyses; present business cases; liaise between business and IT; mentor junior analysts; oversee UAT and QA; support vendor management, system administration, governance over control projects, and cloud service provider onboarding.
Summary Generated by Built In
Job Summary & Responsibilities
ECS is seeking a Senior Business Analyst to work in our Washington, DC (hybrid) office. Please Note: This position is contingent upon contract award.
Job Responsibilities
- Lead the development and implementation of cybersecurity processes and security assessment workflows for information systems, including national security systems, that are managed in a governance, risk management, compliance (GRC) application, and that are governed by federal laws and Department of State policies and standards.
- Document cybersecurity processes and standard operating procedures as needed and manage the same in SharePoint and a GRC.
- Elicit, analyze, and document business requirements, translating high-level needs into detailed functional specifications and use cases.
- Conduct in-depth data analysis, process modeling, and workflow analysis to identify areas for improvement and propose innovative solutions.
- Develop and present compelling business cases, cost/benefit analyses, and strategic recommendations to senior leadership and key stakeholders.
- Act as a liaison between business units and IT teams, facilitating effective communication and collaboration throughout the project lifecycle.
- Lead or mentor less experienced business analysts, providing guidance on best practices and fostering a culture of continuous learning.
- Oversee and participate in user acceptance testing (UAT) and quality assurance activities, ensuring solutions meet business requirements and are delivered on time and within budget.
- May also be responsible for tasks like vendor management and system administration, depending on the specific role requirements.
- Provide governance support over common control projects and cloud service provider on-boarding
Salary Range: $130,000-$147,000
General Description of Benefit
Preferred Qualifications- Bachelor's degree in Computer Science, MIS/IT, Engineering, Information Security/Assurance, or a related field
- Minimum five (5) years of information security experience
- Demonstrated experience conducting full-scope technical security control testing across component types, including development of security and privacy assessment plans
- Working knowledge of RMF Steps 1-6
- Strong understanding of NIST SP 800-53 controls, the NIST Cybersecurity Framework, and applicable information security/privacy laws and regulations
- Ability to analyze information system configurations and technical specifications against NIST SP 800-53 and related overlays
- Experience developing risk-based documentation
- Excellent written and verbal communication skills, with the ability to present control requirements and deficiencies clearly to both technical and non-technical audiences
- Active Secret clearance required with eligibility to get Top Secret clearance
Skills Required
- Bachelor's degree in Computer Science, MIS/IT, Engineering, Information Security/Assurance, or a related field
- Minimum five (5) years of information security experience
- Demonstrated experience conducting full-scope technical security control testing and developing security and privacy assessment plans
- Working knowledge of RMF Steps 1-6
- Strong understanding of NIST SP 800-53 controls, the NIST Cybersecurity Framework, and applicable information security/privacy laws and regulations
- Ability to analyze information system configurations and technical specifications against NIST SP 800-53 and related overlays
- Experience developing risk-based documentation
- Excellent written and verbal communication skills, with ability to present to technical and non-technical audiences
- Active Secret clearance required with eligibility to obtain Top Secret clearance
ECS Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about ECS and has not been reviewed or approved by ECS.
-
Healthcare Strength — ECS advertises multiple national-network medical plan options with HSA eligibility alongside dental and vision coverage. Coverage generally begins quickly and is paired with company-paid short- and long-term disability, adding stability to the health package.
-
Retirement Support — A 401(k) with Safe Harbor and immediate vesting on employer contributions is emphasized, with an employer match available. Access to an employee stock purchase plan via the parent company provides an additional savings avenue.
-
Parental & Family Support — Paid parental leave up to 30 days, adoption assistance, and other family-oriented leaves are highlighted. Feedback suggests these offerings add meaningful value beyond base pay for many roles.
ECS Insights
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
ECS, a segment of ASGN (NYSE: ASGN), delivers advanced solutions and services in cloud, cybersecurity, artificial intelligence (AI), machine learning (ML), application and IT modernization, and science and engineering. The company solves critical, complex challenges for customers across the U.S. public sector, defense, intelligence and commercial industries. ECS maintains partnerships with leading cloud, cybersecurity, and AI/ML providers and holds specialized certifications in their technologies. Headquartered in Fairfax, Virginia, ECS has more than 3,400 employees throughout the U.S. and has been recognized as a Top Workplace by The Washington Post for the last five years.
