Senior Business Analyst – IAM / Cybersecurity :: Location: Chicago, IL — 100% Onsite
Muskan Upadhyay
Senior Business Analyst – IAM / Cybersecurity
Location: Chicago, IL — 100% Onsite
Role Overview
We are seeking a highly motivated Senior Business Analyst to support strategic and operational initiatives across Identity and Access Management (IAM), Authentication, Authorization, Identity Governance, Cloud Security, and emerging AI/Agentic Identity domains.
The ideal candidate will combine strong business analysis, requirements management, data analysis, and stakeholder-management skills with a solid understanding of cybersecurity and identity governance.
Key Responsibilities
Business Analysis & Requirements
- Elicit, analyze, document, and validate business, functional, and non-functional requirements.
- Translate complex security and technical requirements into clear business requirements and user stories.
- Facilitate requirements workshops and stakeholder discussions.
- Create:
- Business Requirements Documents (BRDs)
- Functional Requirements Documents (FRDs)
- User Stories
- Acceptance Criteria
- Process Flows
- Use Cases
- Data Flows
- Data Models
- Maintain requirements traceability and project documentation.
- Support Agile, Waterfall, and hybrid delivery methodologies.
IAM / Security Program Support
Work with security architects and engineering teams on initiatives involving:
- Authentication & Authorization
- Single Sign-On (SSO)
- Multi-Factor Authentication (MFA)
- Identity Governance & Administration (IGA)
- Privileged Access Management (PAM)
- Role-Based Access Control (RBAC)
- Conditional Access
- Cloud Identity Management
- AI and Agentic Identity Governance
- Identity lifecycle management
- Access reviews
- Entitlement models
- Governance controls
Governance, Risk & Compliance
- Support audit-readiness activities and evidence collection.
- Assist with regulatory and compliance assessments related to IAM.
- Track remediation activities, risk findings, and control improvements.
- Collaborate with Risk Management, Compliance, and Internal Audit teams.
- Support security policy, standard, and procedure initiatives.
Data Analysis & Reporting
- Analyze security, IAM, and operational data to identify trends, risks, and improvement opportunities.
- Develop dashboards, metrics, and executive reporting.
- Support KPI/KRI reporting for security initiatives.
- Perform data validation and quality assessments.
- Conduct business impact analysis.
Stakeholder Management
- Act as a liaison between business stakeholders, security teams, and technology organizations.
- Facilitate communication between technical and non-technical audiences.
- Support program governance and steering committee reporting.
- Prepare executive presentations and status reports.
- Maintain project documentation and requirements traceability.
Required Qualifications
- Bachelor's degree in Information Systems, Computer Science, Cybersecurity, Business Administration, or a related field.
- 5+ years of Business Analysis experience, preferably supporting Information Security, Cybersecurity, IAM, or Technology programs.
- Overall 8–10 years of relevant experience preferred.
- Experience working on security, cloud, or identity-related initiatives.
- Strong requirements gathering and documentation skills.
- Strong stakeholder-management and communication skills.
- Experience creating BRDs, FRDs, user stories, acceptance criteria, process flows, and data/reporting requirements.
- Strong analytical, problem-solving, and organizational skills.
- Excellent written and verbal communication.