Cybersecurity Business Analyst

Location: Remote

Department: Government IT Division

CAM Business Analyst

Pay Rate: $60,000 annually with full benefits

 Position Overview

 A Business Analyst to manage intake of items from ATO Managers and stakeholders, capture requirements, conduct process assessments, and perform current-state and future-state analysis. The BA is central to Phase I assessment activities (Current-State, Reporting, Training, AI Opportunity, and Ecosystem Assessments) and continues to support Phase II design and Phase III enterprise scale. 

 

Key Responsibilities

• Design, document, and standardize the security processes that underpin the CAM Module's use across the enterprise.
• Ensure CAM workflows are clearly defined, repeatable, and properly support the inheritance of common controls into area segments.
• Lead day-to-day execution of the CAM Implementation transition plan content, including clearly defined roles and responsibilities (RACI matrices). 
• Implement and document control inheritance logic in collaboration with the Sr Cyber Security Engineer, ensuring inherited controls properly flow from common control providers to area segments. 
• Partner with ISOs and the ATO program office to validate process accuracy and drive consistent adoption. 
• Collect lessons learned and continuous improvement opportunities from ATO Managers and translate them into process updates. 
• Support audit readiness by ensuring documentation traceability, version control, and accuracy. 
• Serve as a subject matter expert during training delivery and office hours; co-lead select sessions with the Training Developers. 
• Provide input to the Developer and PowerBI Engineer on process metrics and KPIs. 

 

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Systems, Engineering, Mathematics, Business Administration or related field. 
• 5+ years of experience in system security engineering, process design, or governance within an information security function. 
• Working knowledge of NIST SP 800-37 (RMF), NIST SP 800-53, and control inheritance concepts. 
• Hands-on experience with workflows (GRC, IRM, or CAM strongly preferred). 
• Security+ or equivalent IAT II / IAM I certification. 

 

Preferred Qualifications

• CGRC (CAP), CISSP, or comparable certification. 
• Lean Six Sigma Green Belt or higher. 
• Experience with control inheritance modeling in large, complex enterprises. 
• Prior VA or federal RMF experience.