Back to Jobs
Recently postedOperations & Project Management
SW
Senior Business Analyst - Continuous Controls Monitoring (CCM)
Quick overview
SeniorityMid Senior
Work modeHybrid
LocationMalvern, PA, United States
Stakeholder ManagementBusiness AnalysisAgile
Job description
Key Responsibilities:
- Partner with cybersecurity control owners and SMEs to identify controls suitable for continuous monitoring and automation.
- Assess controls based on risk, maturity, repeatability, data availability, monitoring feasibility, and assurance value.
- Translate control objectives into measurable monitoring rules, logic, thresholds, exception criteria, and acceptance criteria.
- Define data sources, attributes, coverage, refresh frequency, data-quality checks, dependencies, and evidence requirements.
- Create user stories, process flows, functional/data requirements, acceptance criteria, and requirements traceability.
- Partner directly with engineering and data teams to build scalable automated monitoring routines.
- Validate monitoring outputs for accuracy, explainability, actionable exceptions, and alignment with control objectives.
- Coordinate data validation, logic testing, UAT, reconciliation, defect resolution, and false-positive remediation.
- Drive production go-live, including ownership, reporting, exception management, escalation, remediation, and operational handoff.
- Facilitate workshops and manage RAID items, dependencies, decisions, and stakeholder communication.
Required Experience / Proficiency:
- Continuous Controls Monitoring (CCM): Hands-on experience designing/building/implementing CCM or automated control monitoring.
- CCM End-to-End Delivery: Must have taken monitoring use cases from requirements through build, testing/UAT and production go-live.
- Cybersecurity Controls: Strong understanding of control objectives, operating effectiveness, automated evidence and exception-based monitoring.
- Monitoring Logic & Automation: Ability to translate controls into measurable rules, thresholds, data requirements and acceptance criteria.
- Business Analysis: Strong requirements elicitation, process mapping, workshops, user stories, acceptance criteria and traceability.
- Technical Stakeholder Management: Hands-on collaboration with control owners, cybersecurity engineering, data and technology teams.
Preferred:
- Security telemetry/data exposure across IAM, vulnerability management, endpoint security, cloud security, configuration management, or asset inventory.
- CCM, GRC, risk analytics, or control-automation platforms.
- Knowledge of NIST CSF, CIS Controls, ISO 27001, or COBIT.
- Agile delivery, backlog management, sprint ceremonies, and UAT.
- CISSP, CISA, CRISC, CGRC, or similar certification.
Profiles to Avoid:
- Please do not send generic Business Analysts, GRC analysts, auditors, compliance professionals, or reporting/governance profiles who have only worked around controls.
- The key differentiator is actual hands-on CCM / automated control-monitoring implementation experience, including defining monitoring logic and taking use cases into production.
Suggested Profiles/Titles to Target:
- Continuous Controls Monitoring Business Analyst.
- CCM Business Analyst.
- Cybersecurity Controls Automation Business Analyst.
- Cyber GRC Automation Business Analyst.
- Controls Automation Consultant / Analyst.
- Technology Risk & Controls Automation Business Analyst.
- When sharing profiles, please highlight the candidate's specific CCM project, what controls they automated, their role in defining monitoring logic/data requirements, and whether they took the solution through production go-live.
Similar jobs
- PS
Utility Business Analyst | W2 RoleRecently posted
Pull Skill Technologies · Springfield, VA · Hybrid 🇺🇸
Stakeholder ManagementScrumRequirements Gathering+1Operations & Project ManagementSalary not listed - CS
Senior Business Analyst - Remote / TelecommuteRecently posted
Cynet Systems · Frankfort, KY · Remote 🇺🇸
Microsoft ExcelMicrosoft WordRequirements Gathering+2Operations & Project ManagementSalary not listed - IT
Technical Business AnalystRecently posted
ISite Technologies Inc · McLean, VA · Hybrid 🇺🇸
Microsoft ExcelProcess ImprovementOperations & Project ManagementSalary not listed - RT
Senior Configuration Analyst with Security Clearance
RTX · Pittsfield, MA · Hybrid 🇺🇸
ComplianceInventory ControlProcurement$86.8k - $165.2k/yr - CS
Senior Data Governance Business AnalystRecently posted
Cynet Systems · Richmond, VA · Hybrid 🇺🇸
Stakeholder ManagementBusiness AnalysisContinuous Improvement+5Operations & Project ManagementSalary not listed - GS
Business Analyst with Data GovernanceRecently posted
Global Sumi Technologies Inc · Richmond, VA · Hybrid 🇺🇸
Stakeholder ManagementBusiness AnalysisContinuous Improvement+4Operations & Project ManagementSalary not listed - MP
Senior Business Analyst - DataRecently posted
McCann Partners · Chicago, IL · Hybrid 🇺🇸
Business AnalysisProcess ImprovementRequirements Gathering+2Operations & Project ManagementSalary not listed - TO
Business Analyst - Oil & gasRecently posted
TOPSYSIT · United States · Remote 🇺🇸
Business AnalysisRoot Cause AnalysisData AnalysisOperations & Project ManagementSalary not listed - IN
Business Analyst – Application Design, Redesign & ModernizationRecently posted
InfiCare · Boston, MA · Hybrid 🇺🇸
AgileOperations & Project ManagementSalary not listed - SS
Business analystRecently posted
SOHO Square Solutions · McLean, VA · On-site 🇺🇸
Stakeholder ManagementMicrosoft ExcelProcess Improvement+1Operations & Project ManagementSalary not listed - VN
Business AnalystRecently posted
Virtual Networx · Seattle, WA · Hybrid 🇺🇸
Stakeholder ManagementProcess ImprovementAgileOperations & Project ManagementSalary not listed - AS
Epic AnalystRecently posted
Abacus Service Corporation · United States · Remote 🇺🇸
NursingTriageSalary not listed
