Cybersecurity Business Analyst

CAM Business Analyst

Pay Rate: $60,000 annually with full benefits

 Position Overview

 A Business Analyst to manage intake of items from ATO Managers and stakeholders, capture requirements, conduct process assessments, and perform current-state and future-state analysis. The BA is central to Phase I assessment activities (Current-State, Reporting, Training, AI Opportunity, and ServiceNow Ecosystem Assessments) and continues to support Phase II design and Phase III enterprise scale. 

Key Responsibilities

•     Design, document, and standardize the security processes that underpin the CAM Module's use across the enterprise.
•     Ensure CAM workflows are clearly defined, repeatable, and properly support the inheritance of common controls into area segments.
•     Lead day-to-day execution of the CAM Implementation transition plan content, including clearly defined roles and responsibilities (RACI matrices). 
•     Implement and document control inheritance logic in collaboration with the Sr Cyber Security Engineer, ensuring inherited controls properly flow from common control providers to area segments. 
•     Partner with ISOs and the ATO program office to validate process accuracy and drive consistent adoption. 
•     Collect lessons learned and continuous improvement opportunities from ATO Managers and translate them into process updates. 
•     Support audit readiness by ensuring documentation traceability, version control, and accuracy. 
•     Serve as a subject matter expert during training delivery and office hours; co-lead select sessions with the Training Developers. 
•     Provide input to the ServiceNow Developer and PowerBI Engineer on process metrics and KPIs. 

Required Qualifications

•     Bachelor's degree in Cybersecurity, Information Systems, Engineering, Mathematics, Business Administration or related field. 
•     5+ years of experience in system security engineering, process design, or governance within an information security function. 
•     Working knowledge of NIST SP 800-37 (RMF), NIST SP 800-53, and control inheritance concepts. 
•     Hands-on experience with ServiceNow workflows (GRC, IRM, or CAM strongly preferred). 
•     Security+ or equivalent IAT II / IAM I certification. 

Preferred Qualifications

•     CGRC (CAP), CISSP, or comparable certification. 
•     Lean Six Sigma Green Belt or higher. 
•     Experience with control inheritance modeling in large, complex enterprises. 
•     Prior VA or federal RMF experience.