Cyber Business Analyst

Role: Cyber Business Analyst 

Location: Juno Beach, FL (Onsite)

Position Overview

The CDI program is consolidating cybersecurity data across seven Cyber Security domains – Data Protection, Vulnerability Management & SOC, Governance/Risk/Compliance (GRC), Identity & Access Management (IAM), Cyber Resiliency, Security Architecture & Engineering, and Strategy/Program Management & Performance – into a unified AWS Redshift data platform and a persona-based Power BI reporting layer.

This role is being created: to own domain metric-definition, requirements documentation, and data-source-mapping validation as a dedicated discipline, relieving the Product Owner and giving the program a single accountable owner for “what are we building and why” across all seven domains.

Key Responsibilities

Domain Metric-Definition Workshop Facilitation

• Plan and run structured metric-definition workshops with domain SMEs across all 7 CISO cyber domains, confirming up to 4 priority metrics per domain and documenting agreed calculation logic, definitions, and business rules.
• Take over workshop facilitation currently carried by the Product Owner, directly relieving the Sprint 1–2 capacity overload identified in the program''s risk register.
• Co-facilitate with the Data Scientist and Architect where technical depth (e.g. Gold-layer semantic view feasibility) is required, ensuring metrics are both business-meaningful and technically buildable.

Requirements Documentation

• Translate workshop outcomes into structured business and functional requirements – metric definitions, business rules, data lineage, and acceptance criteria – in a consistent, dashboard-ready format.
• Maintain and evolve the domain metric catalog as workshops confirm, revise, or reject the illustrative draft metrics currently placeholder-scoped in the backlog.
• Document the persona access model (Operations / Business / Executive) per domain in partnership with the Architect and QA Engineer, feeding downstream row-level security design.

Data Source & Domain Mapping Validation

• Validate and maintain the domain-to-data-source mapping across all 16 integrated sources (Tanium, Tenable, Service-Now CMDB, EDP-BU, KEV, SPM-LMS, GRC Central, Splunk, SPM Phishing, AzureSSO, Dragos, CrowdStrike, Proofpoint, Cyware, Rubrik, XLS Files) directly with domain SMEs, since several sources are currently mapped as draft assumptions requiring confirmation.
• Escalate and document any data gaps discovered between confirmed metric definitions and available Gold-layer data before dashboard build begins.

Backlog & Sprint Support

• Work with the Product Owner and Scrum Master to translate approved requirements into Jira-ready user stories with clear, testable acceptance criteria.
• Support sprint planning, backlog grooming, and PI-to-PI scope transitions, ensuring changes to draft metrics are captured as tracked backlog items rather than undocumented scope drift.

Stakeholder & Governance Liaison

• Support UAT coordination and domain-level stakeholder sign-off alongside the Product Owner and QA Engineer.
• Contribute to the published metric catalog and data governance documentation delivered at program closeout, ensuring requirements traceability from workshop to production dashboard.

Qualifications

Required Qualifications

• Bachelor’s degree in information systems, Computer Science, Business Administration, or a related field.
• 5+ years of experience as a Business Analyst on data, BI, or cybersecurity programs, ideally within a large enterprise or Fortune 500 engagement.
• Demonstrated experience planning and facilitating structured requirements or metric-definition workshops with both technical and business/executive stakeholders.
• Working knowledge of layered data warehouse architectures (Bronze/Silver/Gold or equivalent Raw/Integrated/Semantic models) and BI tools such as Power BI.
• Experience operating within Agile/SAFe delivery – Program Increments, sprints, epics/features/stories, backlog grooming.
• Strong written documentation skills – able to produce clear, unambiguous business requirement documents, metric catalogs, and acceptance criteria that a development team can build against without rework.
• Excellent stakeholder management and facilitation skills; comfortable running workshops with senior domain SMEs and CISO-office stakeholders.

Preferred Qualifications

• Prior exposure to one or more cybersecurity domains: vulnerability management, GRC, IAM, security architecture, or cyber resiliency.
• Familiarity with Jira and Confluence for backlog and documentation management.
• CBAP, CCBA, or equivalent Business Analysis certification.
• Exposure to AWS Redshift / AWS Glue-based data platforms.