IT Security BA

• Support the EOHHS CISO Office with security operations and governance initiatives
• Document and improve security policies, procedures, SOPs, playbooks, and workflows
• Conduct process analysis to identify gaps, risks, and improvement opportunities
• Work closely with security teams, IT teams, and agency stakeholders
• Create process maps, swim lane diagrams, reports, dashboards, and presentations
• Support security compliance, audit readiness, and governance activities
• Gather and document business and security requirements
• Track security projects, risks, issues, and decisions
• Develop future-state processes and operational roadmaps
• Help create security training and communications
• Translate undocumented security practices into repeatable, auditable processes.

• 8 years of IT/Cybersecurity experience
• 3+ years as a Business Analyst, Process Analyst, Technical Writer, or Security Analyst
• Strong security process documentation (policies, SOPs, playbooks, runbooks, workflows)
• Experience with requirements gathering and stakeholder interviews
• Ability to analyze and improve security processes
• Knowledge of NIST CSF, CIS Controls, and ISO 27001
• Experience supporting security governance, compliance, and audits
• Excellent written communication and presentation skills
• Experience creating process maps, flowcharts, and swim lane diagrams.

Cerebra Consulting Inc is a System Integrator and IT Services Solution provider with a focus on Big Data, Business Analytics, Cloud Solutions, Amazon Web Services, Salesforce, Oracle EBS, Peoplesoft, Hyperion, Oracle Configurator, Oracle CPQ, Oracle PLM and Custom Application Development. Utilizing solid business experience, industry-specific expertise, and proven methodologies, we consistently deliver measurable results for our customers. Cerebra has partnered with leading enterprise software companies and cloud providers such as Oracle, Salesforce, Amazon and able to leverage these partner relationships to deliver high-quality, end-to-end customer solutions that are targeted to the needs of each customer.