Security Business Analyst
 Spectraforce Technologies | |
 United States, Illinois, Chicago | |
 Jan 06, 2026 | |
|
Title: Security Business Analyst
Location: Chicago, IL 60602 - Hybrid Duration: 10 months with possibility of extension Seeking a Business Analyst to support development of Risk Metrics Dashboards for Information Security programs. This role will focus on translating business needs into actionable requirements for reporting and analytics, ensuring stakeholders have clear visibility into security risks and program performance. Candidate should have strong analytical and communication skills, with understanding of key Information Security domains to effectively gather requirements and collaborate with technical teams. Key Responsibilities: Partner with Information Security program owners to define business requirements for risk metrics and dashboards. Analyze and document KPIs, KRIs, and compliance metrics across security domains: o Identity Authentication and Authorization o Identity Governance and Administration o Privilege Access Management o Security Operations o Attack Surface Management o Data Protection Work with data engineering and visualization teams to design dashboard layouts and ensure accurate data representation. Facilitate requirements workshops, stakeholder interviews, and gap analysis. Develop functional specifications, user stories, and acceptance criteria for dashboard development. Ensure alignment of metrics with regulatory requirements, internal policies, and risk frameworks. Support testing and validation of dashboards before deployment. Prepare documentation and training materials for end-users. Qualifications College or University degree and/or relevant proven work experience in the area of Information Security is required 3- 5 years of professional experience with significant experience working as a BA within Information Security. Experience with data visualization tools (e.g., Power BI, Tableau) is a plus. Excellent communication and stakeholder management skills. Ability to translate complex technical concepts into business-friendly language. Knowledge of data privacy regulations and security best practices. | |