Job Title: Cyber Security Product Owner / Business Analyst
Location: Miami, Florida
Mode: Contract
Job Description:
We are looking for an experienced Cyber Security Product Owner / Business Analyst to act as the bridge between Business units Application Teams, BISOs, and the Cyber Security team.
This role will focus on understanding the current implementation and coverage of key security capabilities, identifying gaps, developing clear service offerings, and driving adoption across Business Units. The role will also gather business requirements and work with GCS teams to improve existing solutions where gaps are identified.
Key Responsibilities :
Capability Mapping & Gap Analysis
· Assess the implementation and coverage of SAST, DAST, Container Security, PKI, and Secrets Management across applications and Business Units.
· Identify and document coverage, integration, process, and capability gaps.
· Gather requirements from application teams and translate gaps into clear requirements for the AppSec team.
· Track requirements and improvements through a prioritized backlog.
Service Catalog & Documentation
· Develop and maintain clear, easy-to-use Service Offering Catalogs for SAST, DAST, Container Security, PKI, and Secrets Management.
· Document service scope, onboarding process, prerequisites, responsibilities, support model, and integration requirements.
· Help make security services easier for application teams to understand and adopt.
Stakeholder Engagement & Adoption
· Act as the key liaison between BU Application Teams, BISOs, and Cybersecurity security teams.
· Partner with BISOs to promote security services and increase adoption across Business Units.
· Conduct discovery sessions with application, engineering, DevOps, and architecture teams to understand their security requirements and challenges.
· Help application teams align security capabilities with their development and CI/CD processes.
· Track adoption challenges and work with AppSec teams to address solution gaps.
Required Skills & Experience
· Experience as a Product Owner, Product Manager, Technical Business Analyst, or Security Consultant within Cyber Security, Application Security, or DevSecOps.
· Good understanding of SAST, DAST, Container Security, PKI, Secrets Management, and CI/CD security integration.
· Experience developing service catalogs, requirements, capability assessments, product backlogs, or technical documentation.
· Strong requirements gathering, gap analysis, and stakeholder management skills.
· Ability to translate technical security capabilities into clear business value and practical service offerings.
· Strong communication skills and the ability to work across business, application, engineering, BISO, and security teams.
· Ability to influence and drive outcomes across teams without direct authority.
Key Deliverables
During the 6 to 12-month engagement, the role will focus on delivering:
· Security capability and coverage assessment
· Service Offering Catalogs for key security services
· Business Unit and application adoption assessment
· Requirements and capability gap register
· Prioritized improvement backlog
· Application onboarding and adoption pipeline
· Recommendations to Appsec team for addressing identified solution gaps
· Adoption, coverage, Documentation and gap reporting for stakeholders
