Business Analyst w​/IT Risk​/Capital Markets

opening details

opening: 3
role: business analyst w/ it risk/capital markets/banking and security/ nist, glba, sox
location: hybrid in troy, mi (3 days)
duration: 1 year
moi: video

• we need: three senior (8+ years) business analysts with experience supporting it risk and security projects, including work with regulatory frameworks such as nist, glba, sox, and experience with controls, audit response, vulnerability remediation, or security tool deployments.
• candidates must currently be within a one-hour commute to troy, mi.
• please google distances before you send me candidates. The client wants to start interviewing by the end of the week and select three candidates next week.
• candidates must have long projects/good tenure, excellent communication skills, and a state-issued  (not bills) showing they are local.

• 1. How many years working with: business analyst
• 2. How many years working with: it risk and security
• 3. How many years working with: nist, glba, sox
• 4. How many years working with: controls, audit response, vulnerability remediation

we are seeking a senior business analyst with a strong background in it risk and security to support strategic initiatives across risk, compliance, and security domains. This individual will work closely with stakeholders, project managers, and technical teams to analyze business requirements, translate them into actionable solutions, and ensure alignment with regulatory and control frameworks.

the ideal candidate will have experience in enterprise risk programs, security controls, and related frameworks (e.g., nist, glba), and be comfortable working across multiple stakeholders and systems. Experience with data visualization tools like power bi is a plus.

• requirements gathering & analysis: collaborate with stakeholders to elicit, analyze, and document business and functional requirements.
• process mapping & gap analysis: evaluate current processes, identify gaps, and propose control improvements aligned with regulatory expectations.
• risk & security focus: analyze and support initiatives involving data loss prevention (dlp), vulnerability management, security tool implementations, and compliance efforts.
• stakeholder communication: act as the liaison between business units, technology teams, and vendors to ensure requirements are clearly understood and delivered.
• reporting & dashboards: support development and maintenance of dashboards and kpis using tools such as power bi or excel.
• testing & validation: assist in uat planning, test case development, and post-implementation verification to ensure quality outcomes.
• documentation: produce clear business requirement documents, process flows, and risk/control matrices as needed.

• education: bachelor's degree in business, information systems, or a related field.
• experience: minimum of 7 years of experience as a business analyst, preferably in financial services or it risk/security environments.
• knowledge: familiarity with risk and regulatory frameworks such as nist, glba, sox
  , and experience with controls, audit response, vulnerability remediation
  , or security tool deployments
  .
• tools: proficiency in microsoft office, visio, and experience with power bi or other reporting tools is a strong plus.
• skills: excellent analytical, problem-solving, and communication skills. Strong attention to detail and ability to manage multiple priorities.