IT Business Analyst

Roles, Responsibilities and Qualifications Role Description The Business Analyst (BA) is responsible for eliciting, analyzing, and translating operational needs into clear, actionable requirements to support Managed Security Services Provider to deliver and transition initiatives. The role will be critical in supporting the transition, onboarding, and optimization of MSSP. This role is responsible for bridging business, security, and service delivery stakeholders to ensure security services are transitioned effectively, aligned with organizational risk posture, and compliant with regulatory and contractual obligations. Responsibilities Requirements Management 1. Lead the elicitation, analysis, documentation, and validation of security team functional, and non-functional requirements related to managed security services. 2. Develop current-state and future-state security service models, including processes, workflows, roles, and responsibilities. 3. Maintain requirements traceability across transition phases, from discovery through stabilization. Managed Security Services Provider transition 1. Support vendor onboarding, offboarding, or transition initiatives, ensuring continuity of security controls and services. 2. Work closely with Security team, infrastructure, and vendors to define service scope, escalation paths, and operational dependencies. 3. Identify transition risks, gaps, and dependencies, support mitigation planning and decision-making. Security Standards & Procedures Development 1. Work closely with the security team to develop, review, and maintain security standards, procedures, and operational playbooks. 2. Translate regulatory, policy, and risk management requirements into clear, actionable standards and procedures. Service Governance & Contract Alignment 1. Support contract interpretation by translating contractual obligations into operational requirements and deliverables. 2. Contribute to transition governance, reporting, and stakeholder communications. Classification : Protected A Documentation & Continuous Improvement 1. Produce high-quality documentation, including requirements, process flows, standards, procedures, and transition artifacts. 2. Maintain traceability between requirements, security controls, and vendor deliverables. 3. Support post-transition stabilization and continuous improvement initiatives. Key competencies 1. Collaborate with stakeholders to gather the requirements and document the detailed requirements. 2. Understand the processes and ability to guide the stakeholder to identify areas to optimize the process with technology. 3. End to end tracking of requirements with solution delivered. 4. Manage the rollout test plan by working collaboratively with multiple stakeholders and the project team to develop the approach and document the test plan. 5. Tracking of testing lifecycle and ensure the outcome of the testing aligns with the requirements. 6. Ensure solution adoption and provide guidance to the user community to adopt the new services. 7. Provide instruction on use of technology and to support the adoption of the solution. 8. Manage and deliver change management activities, including training, communication and documentation, to ensure smooth adoption of systems or processes. 9. Facilitate communication and collaboration between business and technical teams to drive project success. 10. Conduct workshops, interviews, and meetings to elicit requirements and gather feedback. 11. Participate in testing, user acceptance, and deployment activities to ensure solutions satisfy the requirements. Qualifications 1. 5+ years of IT Business Analyst experience in complex IT initiatives. 2. Certifications such as Certified Business Analysis Professional (CBAP) or Entry Certificate in Business Analysis (ECBA) are advantageous. 3. Problem-Solving Skills : Strong analytical and problem-solving skills to understand complex requirements and translate them into technical solutions. 4. Excellent communication skills, both verbal and written. 5. Ability to articulate requirements and translate to technical requirements. 6. Experience with Managed Security Service Provider will be a plus. 7. Experience with cybersecurity compliance requirements and Cybersecurity frameworks (NIST, CIS, etc.) will be a plus.