Cybersecurity Senior Risk Analyst / ServiceNow Business Analyst

Immediate need for a talented Cybersecurity Senior Risk Analyst / ServiceNow Business Analyst. This is a 12+ Months Contract opportunity with long-term potential and is located in Abbott Park, IL (Onsite). Please review the job description below and contact me ASAP if you are interested.

Job ID:26-24702

• Pay Range: $50 - $55/hour. Employee benefits include, but are not limited to, health insurance (medical, dental, vision), 401(k) plan, and paid sick leave (depending on work location).
• Key Responsibilities:

• Evaluate, assess, and monitor cybersecurity and third-party risk activities in alignment with organizational risk management objectives.
• Partner with business stakeholders to gather, analyze, and document business requirements for risk management processes and technology solutions.
• Develop business use cases, user stories, process maps, and functional requirements to support cybersecurity and GRC initiatives.
• Manage and prioritize enhancement requests, ensuring business needs are clearly documented and translated into actionable development requirements.
• Coordinate and execute system testing activities, including test strategy development, test script creation, user acceptance testing (UAT), defect tracking, and validation of implemented solutions.
• Collaborate with technical teams to support solution design, implementation, and deployment activities.
• Analyze existing workflows and identify opportunities to improve operational efficiency, data quality, automation, and user experience.
• Act as a liaison between cybersecurity teams, business stakeholders, and technology partners to ensure successful delivery of enhancements and process improvements.
• Support data governance and stewardship activities to ensure the integrity, accuracy, and consistency of information used in risk management processes.
• Develop metrics, reporting, and dashboards to provide visibility into risk posture, operational performance, and program effectiveness.
• Participate in risk assessments, control evaluations, and remediation tracking activities.
• Prepare business and technical documentation, including requirements, testing artifacts, training materials, and process documentation.
• Support audit, compliance, and regulatory activities by providing documentation and evidence related to cybersecurity risk management processes and system controls.

Key Requirements and Technology Experience:

• Skills - Cybersecurity / IT Risk Management, Third-Party / Vendor Risk Management (TPRM), ServiceNow GRC / IRM or similar GRC platforms, Business Requirements & Business Analysis, UAT / Test Case Development / Defect Management, GRC, Risk & Security Controls / Frameworks, Stakeholder Management & Cross-Functional Collaboration
• Demonstrated experience as a Client Analyst, Business Analyst, or Product
• Owner supporting enterprise workflows and business process improvements.
• Strong understanding of cybersecurity risk management, third-party risk management, and GRC processes.
• Experience developing business requirements, use cases, user stories, workflow diagrams, and testing documentation.
• Proven experience managing enhancement requests and driving projects through the full solution lifecycle, from requirements gathering through testing and implementation.
• Experience leading or coordinating User Acceptance Testing (UAT) and defect management processes.
• Strong analytical, problem-solving, communication, and stakeholder management skills.
• Ability to translate complex business requirements into functional solutions that align with organizational objectives.
• Experience working in cross-functional environments involving business, cybersecurity, risk, compliance, and technology teams.
• Bachelor’s degree in Information Security, Computer Science, or related field; or equivalent experience.
• 3+ years of experience in cybersecurity risk analysis or related field.
• Strong analytical skills, ability to work independently, and collaborative interpersonal skills.
• Experience in business analysis, including requirements gathering and test case development.
• Experience with Client or similar vendor management software.
• Understanding of procurement and risk processes.
• Knowledge of information security and risk control frameworks.
• Familiarity with ISO 27001, SOC 2, HITRUST, FedRAMP, and ISO 22301 standards.
• Operational experience with GRC toolsets.
• CISSP/CISM certification (or similar).

Our client is a leading Healthcare Industry and we are currently interviewing to fill this and other similar contract positions. If you are interested in this position, please apply online for immediate consideration.

Pyramid Consulting, Inc. provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

By applying to our jobs you agree to receive calls, AI-generated calls, text messages, or emails from Pyramid Consulting, Inc. and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy here.