Security IT Business Analyst
Job Type: Contract
Location: Quincy, MA
Work Model: Hybrid
Schedule: Monday–Friday, 8:00 AM–4:00 PM EST

Position Overview

We are seeking a Security IT Business Analyst to support security operations, process improvement, governance, and documentation initiatives.

The ideal candidate will have a strong background in business analysis, process documentation, and information security. This role will work closely with security teams, IT teams, and business stakeholders to understand existing processes, identify gaps, and create clear and structured documentation.

The position is well suited for someone who can communicate effectively with technical teams and translate complex information into easy-to-understand processes, procedures, and documentation.

Key Responsibilities

• Develop and maintain security policies, procedures, SOPs, playbooks, runbooks, workflows, and process documentation.

• Analyze current security processes through stakeholder discussions, interviews, and process reviews.

• Identify process gaps, inefficiencies, risks, and opportunities for improvement.

• Support security governance, compliance, and audit-readiness activities.

• Gather and document business and technical requirements for security initiatives.

• Create process diagrams, reports, presentations, dashboards, and other documentation.

• Work with IT, security, and business stakeholders to ensure processes are clearly understood and consistently followed.

• Develop future-state processes and recommendations to improve security operations.

• Track security projects, initiatives, risks, issues, decisions, and remediation activities.

• Participate in security reviews and assessments and document findings and recommendations.

• Support security training, communications, and documentation.

• Translate informal or undocumented security practices into structured and repeatable processes.

Required / Preferred Qualifications

• 5–8 years of experience in IT or cybersecurity.

• At least 3 years of experience in a Business Analyst, Process Analyst, Security Analyst, Technical Writer, or similar role.

• Strong experience with process documentation and business requirements.

• Excellent analytical, written, verbal, and presentation skills.

• Experience working with technical and business stakeholders.

• Understanding of information security concepts and security processes.

• Experience with security governance, compliance, risk, or audit activities is preferred.

• Familiarity with security frameworks such as NIST CSF, CIS Controls, or ISO 27001 is preferred.

• Experience creating workflows, process diagrams, SOPs, or similar documentation is highly desirable.

Work Environment

This is a hybrid position based in Quincy, Massachusetts, combining onsite and remote work. Occasional travel to other locations within Massachusetts may be required.

Apply today if you have a strong combination of business analysis, process documentation, and information security experience.