Cybersecurity Business Analyst

🔥 0 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🧐 Business Analyst

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Virtusa

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1996

💼 Consulting

🏢 Enterprise

🤖 Artificial Intelligence

💰 $108M Post-IPO Equity - Virtusa on 2017-05

Consulting • Enterprise • Artificial Intelligence

Virtusa is a global technology services and consulting company that helps enterprises reimagine their business through digital engineering, AI-driven and domain-focused solutions. It offers consulting, design, engineering, automation, analytics and optimization services, and partners with organizations across banking & financial services, communications, healthcare, insurance, retail, manufacturing and other industries to deliver enterprise-scale technology and AI solutions. Virtusa emphasizes AI services, domain-driven solutions for the AI enterprise, and end-to-end digital transformation.

📋 Description

• Lead structured discovery across business, cybersecurity, technology, risk, legal, privacy, procurement, and operations stakeholders • Define the problem, value hypothesis, scope, outcomes, constraints, and measurable acceptance criteria • Elicit, analyse, reconcile, and baseline business, functional, non-functional, security, privacy, regulatory, operational, and reporting requirements • Use interviews, workshops, observation, document analysis, process mapping, and data analysis • Translate cyber risks, threat scenarios, control objectives, and technical constraints into business language and delivery artefacts • Produce decision papers, epics, user stories, use cases, process and data models, traceability matrices, and testable requirements • Own requirements quality and lifecycle, including versioning, prioritisation, change control, impact assessment, and traceability • Track requirements from original need through design, build, testing, deployment, control evidence, and benefits realisation • Produce or coordinate programme artefacts including demand inputs, business requirements, product descriptions, current- and future-state processes, stakeholder maps, RACI, data definitions, acceptance criteria, decision logs, and readiness assessments • Partner with security architects and subject-matter experts across cybersecurity domains • Plan and facilitate workshops, playback sessions, design reviews, and sign-off forums • Identify assumptions, conflicts, gaps, and dependencies and drive them toward explicit decisions • Support sourcing and supplier engagement by defining outcome-based requirements, evaluation criteria, use cases, service levels, security obligations, evidence expectations, and RFP clarification responses

🎯 Requirements

• Proven senior-level business analysis experience in complex cybersecurity, technology, risk, or compliance change • Expertise in requirements elicitation, process analysis, traceability, workshop facilitation, testing, and operational readiness • Ability to translate cybersecurity, risk, and technical concepts into business requirements and decisions • Experience with RFP requirements, suppliers, global stakeholders, and hybrid delivery • Relevant degree or equivalent experience • Broad awareness of NIST CSF, ISO 27001, CIS Controls, and ITIL • Awareness of secure delivery practices • Experience or exposure to identity governance and administration, IAM, MFA, and SSO • Experience or exposure to privileged access management and Active Directory security • Experience or exposure to security operations, logging, SIEM, SOC integration, and incident readiness • Experience or exposure to vulnerability, exposure, and external attack-surface management • Experience or exposure to application, API, web, and cloud security • Experience or exposure to infrastructure, endpoint, network, PKI, and certificate management • Experience or exposure to data security, privacy, cryptography, and information protection • Experience or exposure to cyber resilience, backup, recovery, crisis readiness, and continuity • Experience or exposure to OT/IoT and logistics-site security • Experience or exposure to third-party, supply-chain, M&A, and regulatory cyber risk • Experience or exposure to security governance, control frameworks, audit, and compliance • Experience or exposure to operationalisation, service management, and continuous control improvement • A recognised role certification is preferred

🏖️ Benefits

• 100% remote work • Occasional business trips • Full-time employment