Hi,
We have a very urgent requirement for Cyber Business Analyst. Please let me know if you or someone you know is interested.
Please see the job details below.
Position: Cyber Business Analyst
Location: Juno Beach, FL
Reports To: Team Leader, Cybersecurity Strategic Initiatives (reporting to the Chief Information Security Officer)
Position Overview
The CDI program is consolidating cybersecurity data across seven Cyber Security domains – Data Protection, Vulnerability Management & SOC, Governance/Risk/Compliance (GRC), Identity & Access Management (IAM), Cyber Resiliency, Security Architecture & Engineering, and Strategy/Program Management & Performance – into a unified AWS Redshift data platform and a persona-based Power BI reporting layer.
This role is being created: to own domain metric-definition, requirements documentation, and data-source-mapping validation as a dedicated discipline, relieving the Product Owner and giving the program a single accountable owner for “what are we building and why” across all seven domains.
Key Responsibilities
Domain Metric-Definition Workshop Facilitation
- Plan and run structured metric-definition workshops with domain SMEs across all 7 CISO cyber domains, confirming up to 4 priority metrics per domain and documenting agreed calculation logic, definitions, and business rules.
- Take over workshop facilitation currently carried by the Product Owner, directly relieving the Sprint 1–2 capacity overload identified in the program''s risk register.
- Co-facilitate with the Data Scientist and Architect where technical depth (e.g. Gold-layer semantic view feasibility) is required, ensuring metrics are both business-meaningful and technically buildable.
Requirements Documentation
- Translate workshop outcomes into structured business and functional requirements – metric definitions, business rules, data lineage, and acceptance criteria – in a consistent, dashboard-ready format.
- Maintain and evolve the domain metric catalog as workshops confirm, revise, or reject the illustrative draft metrics currently placeholder-scoped in the backlog.
- Document the persona access model (Operations / Business / Executive) per domain in partnership with the Architect and QA Engineer, feeding downstream row-level security design.
Data Source & Domain Mapping Validation
- Validate and maintain the domain-to-data-source mapping across all 16 integrated sources (Tanium, Tenable, Service-Now CMDB, EDP-BU, KEV, SPM-LMS, GRC Central, Splunk, SPM Phishing, AzureSSO, Dragos, CrowdStrike, Proofpoint, Cyware, Rubrik, XLS Files) directly with domain SMEs, since several sources are currently mapped as draft assumptions requiring confirmation.
- Escalate and document any data gaps discovered between confirmed metric definitions and available Gold-layer data before dashboard build begins.
Backlog & Sprint Support
- Work with the Product Owner and Scrum Master to translate approved requirements into Jira-ready user stories with clear, testable acceptance criteria.
- Support sprint planning, backlog grooming, and PI-to-PI scope transitions, ensuring changes to draft metrics are captured as tracked backlog items rather than undocumented scope drift.
Stakeholder & Governance Liaison
- Support UAT coordination and domain-level stakeholder sign-off alongside the Product Owner and QA Engineer.
- Contribute to the published metric catalog and data governance documentation delivered at program closeout, ensuring requirements traceability from workshop to production dashboard.
Qualifications
Required Qualifications
- Bachelor’s degree in information systems, Computer Science, Business Administration, or a related field.
- 5+ years of experience as a Business Analyst on data, BI, or cybersecurity programs, ideally within a large enterprise or Fortune 500 engagement.
- Demonstrated experience planning and facilitating structured requirements or metric-definition workshops with both technical and business/executive stakeholders.
- Working knowledge of layered data warehouse architectures (Bronze/Silver/Gold or equivalent Raw/Integrated/Semantic models) and BI tools such as Power BI.
- Experience operating within Agile/SAFe delivery – Program Increments, sprints, epics/features/stories, backlog grooming.
- Strong written documentation skills – able to produce clear, unambiguous business requirement documents, metric catalogs, and acceptance criteria that a development team can build against without rework.
- Excellent stakeholder management and facilitation skills; comfortable running workshops with senior domain SMEs and CISO-office stakeholders.
Preferred Qualifications
- Prior exposure to one or more cybersecurity domains: vulnerability management, GRC, IAM, security architecture, or cyber resiliency.
- Familiarity with Jira and Confluence for backlog and documentation management.
- CBAP, CCBA, or equivalent Business Analysis certification.
- Exposure to AWS Redshift / AWS Glue-based data platforms.
The team partners with cybersecurity leaders, program managers, and business stakeholders to ensure initiatives are effectively governed, communicated, and executed in support of the company''s cybersecurity strategy and objectives. Operating under the direction of the Chief Information Security Officer, the team plays a critical role in strengthening organizational effectiveness and enabling successful delivery of cybersecurity programs.
| Kakuli | Estuate, Inc. | P : | E: | 830 Hillview Ct, #280, Milpitas, CA 95035 |
|
|