Urgent w2 Role -Security IT Business Analyst - Quincy, MA (Hybrid)

Job Description:- Key Responsibilities Develop and maintain policies, standards, SOPs, playbooks, runbooks, workflows, swim lane diagrams, and process guides Analyze and document current-state security processes via interviews, observation, and analysis to identify gaps, inefficiencies, risks, and improvement opportunities Support security governance, compliance, and audit readiness, ensuring documentation aligns with Commonwealth, federal, and industry security frameworks Facilitate collaboration between the CISO's Office, IT teams, agency stakeholders, and external partners on security process definition and adoption Prepare reports, presentations, documentation artifacts, and dashboards to track security initiatives and communicate progress to leadership Assist in developing security training, documentation, and communications that promote adoption of policies and best practices Develop future-state process documentation and operational roadmaps to mature security operations Support planning, tracking, and monitoring of security projects and initiatives Manage and document risks, issues, and decisions related to security policies and improvement initiatives Participate in security reviews/assessments and document findings and recommended remediation steps Qualifications 5 8 years of experience in information technology or cybersecurity, including at least 3 years as a business analyst, process analyst, technical writer, security analyst, or related role Strong understanding of information security frameworks and best practices, including NIST Cybersecurity Framework (NIST CSF), CIS Controls, and ISO/IEC 27001 Excellent writing, analytical, communication, and presentation skills, with the ability to translate input from technical SMEs into clear documentation