Business Analyst (Security ARC)

Business Analyst (Security ARC)Location: Chicago(IL) Job Type: ContractMust Have Technical/Functional Skills5+ years of experience as a Business Analyst in Cybersecurity, Information Security, or IT Security projects.Strong understanding of Security Architecture (Security ARC) concepts and security frameworks.Experience gathering, analyzing, and documenting business and technical requirements.Knowledge of IAM (Identity & Access Management), authentication, authorization, SSO, MFA, and RBAC.Experience with risk assessment, compliance, and security governance.Familiarity with security standards such as NIST, ISO 27001, CIS Controls, PCI-DSS, SOC 2, or GDPR.Experience creating Business Requirement Documents (BRD), Functional Requirement Documents (FRD), user stories, process flows, and use cases.Strong experience with JIRA, Confluence, Visio, and Microsoft Office.Knowledge of Agile/Scrum and Waterfall methodologies.Excellent communication, stakeholder management, and documentation skills.Roles & ResponsibilitiesWork with business and security teams to gather and document security requirements.Analyze current business processes and identify security-related improvements.Prepare BRDs, FRDs, user stories, use cases, and process flow diagrams.Collaborate with Security Architects, IAM teams, developers, and project managers.Support security initiatives related to IAM, cloud security, network security, and compliance.Perform gap analysis, impact analysis, and risk assessments.Coordinate user acceptance testing (UAT) and validate business requirements.Facilitate workshops, meetings, and stakeholder discussions.Ensure security solutions align with business objectives and regulatory requirements.Support Agile ceremonies including sprint planning, backlog grooming, and requirement prioritization.Required QualificationsBachelor's degree in Computer Science, Information Technology, Business Administration, or related field.5+ years of Business Analyst experience.Experience working on Cybersecurity or Security Architecture projects.Strong analytical, documentation, and problem-solving skills.Excellent verbal and written communication skills.Preferred SkillsExperience with Identity and Access Management (IAM) solutions such as SailPoint, Okta, CyberArk, Azure AD, or Ping Identity.Familiarity with AWS, Azure, or GCP security concepts.Knowledge of SIEM tools such as Splunk or Microsoft Sentinel.Experience with ServiceNow.Security certifications such as Security+, CISSP, CISM, or CCSP are a plus.Experience with SQL for reporting and data analysis.