Business Analysts

---

Job description

• Provide direct support to the Information Security Office, and participate in meetings to capture required data, and maintain responsibility for outlining and organizing all report material, including seeking team review throughout the draft process
• Assist in documenting System Security Plans and cyber security related Procedures, Policies and other documentations based on interviews with key stakeholders
• Create reports that will discuss the architecture, design rationale, and steps required for operational use
• Writing documentation that details technical specifications
• Organizing and capturing information security operations and translating them into a usable format
• Proofreading and editing documents submitted
• Occasionally brief and provide training of material covered or changed within an updated documentation
• Must have the ability to decode technical information for technical and non-technical groups

Requirements

Training and Experience: Sufficient education, training, and experience to demonstrate the possession and direct application of the following knowledge and abilities.

• 3-5 years of experience as a technical writer preferred
• Experience in cybersecurity is preferred but not required
• Experience with documentation development for systems down to the technical components.
• Experience writing technical content and tailoring the format based on the target audience
• Demonstrated ability to complete, track, update, rewrite, and peer review technical documentation
• Demonstrated ability to follow security analyst and engineering processes and verify technical requirements
• Ability to grasp complex technical concepts and translate into easily understandable documents.
• Experience coordinating with and incorporating input from multiple sources, including SMEs, peers and editors
• Experience completing multiple projects simultaneously, on time and with minimal direct supervision
• Experience working with NIST SP 800-53 controls as well as CSF, RMS, and FISMA
• Ability to read security documentation and pull relevant security control information