Cybersecurity Business Analyst
- Role
- Fullstack
- Experience
- Senior
- Employment
- Full-time
Open to US only. Set where you work from to check your eligibility.
No BS summary
A Business Analyst to manage intake of items from ATO Managers and stakeholders, capture requirements, conduct process assessments, and perform current-state and future-state analysis. The BA is central to Phase I assessment activities (Current-State, Reporting, Training, AI Opportunity, and ServiceNow Ecosystem Assessments) and continues to support Phase II design and Phase III enterprise scale.
Core skills
Required skills
Optional skills
Required languages
MKS2 Technologies, LLC, an award-winning high growth small business, creates innovative and customer-centric technology solutions in the areas of Cyber Security, Instructional Design and Training, Software Engineering and IT Support Services to improve the security and well-being of our clients. Our commitment to excellence and our “Mission First” orientation has resulted in steady growth and an expanding client base across government agencies. We have employees nationwide and for the past three consecutive years were named one of the fastest growing Veteran-owned companies in the nation. Please take a moment to browse through our website and learn more about what it means to serve with MKS2.
CAM Business Analyst
Pay Rate: $60,000 annually with full benefits
Position Overview
A Business Analyst to manage intake of items from ATO Managers and stakeholders, capture requirements, conduct process assessments, and perform current-state and future-state analysis. The BA is central to Phase I assessment activities (Current-State, Reporting, Training, AI Opportunity, and ServiceNow Ecosystem Assessments) and continues to support Phase II design and Phase III enterprise scale.
Key Responsibilities
Design, document, and standardize the security processes that underpin the CAM Module's use across the enterprise. Ensure CAM workflows are clearly defined, repeatable, and properly support the inheritance of common controls into area segments. Lead day-to-day execution of the CAM Implementation transition plan content, including clearly defined roles and responsibilities (RACI matrices). Implement and document control inheritance logic in collaboration with the Sr Cyber Security Engineer, ensuring inherited controls properly flow from common control providers to area segments. Partner with ISOs and the ATO program office to validate process accuracy and drive consistent adoption. Collect lessons learned and continuous improvement opportunities from ATO Managers and translate them into process updates. Support audit readiness by ensuring documentation traceability, version control, and accuracy. Serve as a subject matter expert during training delivery and office hours; co-lead select sessions with the Training Developers. Provide input to the ServiceNow Developer and PowerBI Engineer on process metrics and KPIs.
Required Qualifications
Bachelor's degree in Cybersecurity, Information Systems, Engineering, Mathematics, Business Administration or related field. 5+ years of experience in system security engineering, process design, or governance within an information security function. Working knowledge of NIST SP 800-37 (RMF), NIST SP 800-53, and control inheritance concepts. Hands-on experience with ServiceNow workflows (GRC, IRM, or CAM strongly preferred). Security+ or equivalent IAT II / IAM I certification.
Preferred Qualifications
CGRC (CAP), CISSP, or comparable certification. Lean Six Sigma Green Belt or higher. Experience with control inheritance modeling in large, complex enterprises. Prior VA or federal RMF experience.
Diversity creates a healthier atmosphere: MKS2 Technologies is proud to be an Equal Employment Opportunity / Affirmative Action employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, protected veteran status, disability status, sexual orientation, gender identity or expression, marital status, genetic information, or any other characteristic protected by law.
What you'll do
- Design, document, and standardize the security processes that underpin the CAM Intrusion's use across the enterprise.
- Ensure CAM workflows are clearly defined, repeatable, and properly support the implementation of common controls into area segments.
- Lead day-to-day execution of the Application Implementation transition plan content, including clearly defined roles and assignments.
- Implement and document control inheritance logic in collaboration with the Sr Cyber Security Engineer, ensuring inherited controls properly flow from common control providers to area segments.
- Partner with ISOs and the ATO program office to validate process accuracy and drive consistent adoption.
- Collect lessons learned and continuous improvement opportunities and translate them into process updates.
- Support audit readiness by ensuring documentation traceability, version control, and accuracy.
- Serve as a subject matter expert during training delivery and office hours; co-lead select sessions with Training Cloud developers.
- Provide input to the ServiceNow Developer and PowerBI Engineer on process metrics and KPIs.
What they require
- Bachelor's degree in Cybersecurity, Information Systems, Engineering, Mathematics, Business Administration or related field.
- 5+ years of experience in system security engineering, process design, or governance within an information security function.
- Working knowledge of NIST SP 800-37 (RMF), NIST SP 800-53, and control inheritance concepts.
- Hands-on experience with ServiceNow workflows (GRC, IRM, or CAM strongly preferred).
- Security+ or equivalent IAT II / IAM I certification.
Benefits
- full benefits
An award-winning high growth small business creating innovative and customer-centric technology solutions in Cyber Security, Instructional Design and Training, Software Engineering and IT Support Services for government agency clients.