Business Analyst 5 (Risk & Compliance / Security Policy)

Business Analyst 5 (Risk & Compliance / Security Policy)

• Develop and implement risk policies, standards, and procedures (PSP) aligned with security/privacy frameworks

• Support Security Accreditation Process Team and Information Security Officer (ISO)

• Align policies with POAMs (Plan of Action & Milestones)

• Identify gaps and optimize policy frameworks across the agency

• Provide risk-based recommendations and mitigation strategies

• Lead cross-functional meetings to finalize policies

• Drive policy communication, adoption, and feedback collection

• Streamline and manage policy lifecycle processes

• CJIS (Criminal Justice Information Services)

• NIST framework

• FERPA compliance

• Keylight (GRC tool)

• FOIA

• System Security Plans (SSP)

• Application Security Scanning

• POAMs (Plan of Action & Milestones)

• Strong communication

• Customer service orientation

• Organizational skills

• Bachelor's Degree (mandatory)