Business Systems Analyst Consultant - Cybersecurity Controls
At its midpoint, $140k/yr, this role pays less than the $169k/yr midpoint for Governance, Risk & Compliance (GRC) openings today (usual band $143k–$299k/yr).
The full posting
ABOUT KALLES GROUP
Everyone deserves to be secure. Our mission at Kalles Group is to help secure the future for companies of all shapes and sizes.
While our expertise spans multiple disciplines, our method remains consistent: building trust and relationship with people -- whether you are a client, a consultant, or--in this case--a candidate.
No matter what role you come from--whether you're an executive or just starting your career-you can expect our highest level of attention and respect. We want to find the right fit for each role, but we also want you to find the right fit for your career.
We believe the best way to show you what our team is like is to treat you like you're already a part of it. We hope you'll consider joining our team of experienced professionals who are building their careers at Kalles Group - and having fun while doing it.
WHAT YOU WILL DO
As the Business Systems Analyst Consultant for cybersecurity controls for our client (a large global philanthropic organization), you’ll turn security risks and control objectives into clear, testable requirements. You’ll lead requirements gathering across cybersecurity, IT, engineering, and business stakeholders. You’ll analyze workflows, access permissions, data flows, and integrations to find security gaps. You’ll maintain end-to-end traceability from risk to control, requirement, implementation, test results, and validation evidence, which gives the program accountability and keeps it ready for audit. You’ll support initiatives across identity and access management (IAM), Zero Trust, governance, risk, and compliance (GRC), vulnerability management, and cyber defense. You’ll also work closely with the program’s Project Manager and Change Manager.
KEY RESPONSIBILITIES
- Lead requirements sessions with cybersecurity, IT, engineering and business stakeholders; document business, functional and technical requirements.
- Translate security risks and control objectives into functional requirements, use cases, user stories and acceptance criteria.
- Analyze workflows, access permissions, data flows and integrations to identify gaps and recommend solutions.
- Partner with architects and engineers on functional/technical requirements for implementation and integration.
- Maintain traceability across risks, controls, requirements, implementation, testing and validation evidence.
- Support security initiatives across IAM, Zero Trust, GRC, vulnerability management and cyber defense.
- Define test scenarios; support UAT and control validation; track defects and gaps to resolution.
- Produce audit-ready documentation and evidence for compliance reviews.
- Provide prioritization inputs to the PM and impact/adoption inputs to the Change Manager.
Your values
- Integrity: You believe in doing the right thing, even when it's uncomfortable, seemingly inefficient, or costly.
- Purposefulness: You have a desire to serve others with your skillset and an openness to continuous learning and growth.
- Ownership: You stick to your commitments, follow up with action, and seek clarity in communication & expectations.
Required Qualifications
- 5+ years business systems/business analysis experience with significant cybersecurity or IT risk program exposure.
- Gathering and documenting requirements across cybersecurity, engineering and business stakeholders.
- Supporting enterprise security initiatives (IAM, Zero Trust, GRC, vulnerability management).
- Translating risks and control objectives into system requirements, use cases and acceptance criteria.
- Strong analysis of workflows, access models, data flows and integrations.
- Excellent written/verbal communication bridging technical and non-technical audiences.
Preferred Qualifications
- Requirements/traceability tools (Jira, Azure DevOps, Confluence, GRC platforms).
- Cloud environments (AWS, Azure, GCP)
- PAM or identity governance tools; data-flow diagramming.
WHAT WE OFFER
- The annual salary range for this role is $130,000-$150,000.
- We offer Medical, Dental, Vision plans, 401K with matching, and PTO for salaried employees.
- Work/life balance – we know there’s more to life than work! We encourage our team to pursue other passions, get outside, and spend time with family. We work with clients and consultants to set expectations for a manageable workload.
LOCATION
This role is hybrid, requiring 1-2 days/week on-site at our client's location in Seattle, WA. Therefore, we are currently only considering candidates that are already living in the Seattle area.
HOW TO APPLY
Please fill out the form below (including uploading your most recent resume) and we'll be in touch! We know imposter syndrome can be a barrier to many great applicants. We hope you'll still consider applying. That's why we've made the application process as short and simple as possible.
Even if you're not a fit for the role, you can expect to hear back from us! We want you to have the best experience as a candidate, so please feel free to share feedback at any stage of the process to talent@kallesgroup.com .
Kalles Group is an equal-opportunity employer and does not discriminate on the basis of creed, nationality, race, ethnicity, disability, gender, or other protected class.
Text as Kalles Group published it; last compared with the original on 14 Nov 2026.
The application
Your details and CV, then 4 questions.
- 1.Are you legally allowed to work in the United States?Yes or no
- 2.Will you now, or in the future require Kalles Group to commence (sponsor) an immigration case in order to employ you (for example, H-1B or other employment-based immigration case)?Yes or no
- 3.What state do you live in right now?Short answer
- 4.If you used AI at all during this application process, have you verified that all representations that you have made of your identity, location and experience remain factual?Short answer · optional
Taken from Kalles Group's application form as it stood on 14 Nov 2026.
The employer: Kalles Group
A Seattle consultancy for security, risk and technology programs, Kalles Group has six consultant openings centered on cybersecurity controls, endpoint security, identity and privacy.
Pay and benefits: Salaried consultant positions delivering client engagements for a security consultancy.
Other security roles worth a look

$120,000–$220,000/yr
Information Security Lead (shows the role here)
Mama Money · AppSec · Remote· 4d agoDetails


IT & Security Specialist (shows the role here)
People Data Labs · GRC · Remote· 2w agoDetails
$120,000–$140,000/yr
Led audits or a certification programme?
Security teams sometimes ask us directly for someone with a given specialty, clearance or certification. Join the candidate pool once and we put you forward when a brief matches, and only after you say yes. No cost to you.
Hear first when Kalles Group posts a security role
We read Kalles Group's careers system around the clock and send its new security roles in a weekly email, along with comparable openings at other employers. Free; leave whenever you like.