Cybersecurity Business Analyst – Continuous Controls Monitoring (CCM)

Sr. Cybersecurity Controls Business Analyst
Greater Philadelphia Area
Hybrid (3 days a week onsite)
Contract role
Pay rate: $55-65/hour
The Planet Group has partnered with a Greater Philadelphia area company to locate Senior Business Analyst to help build a new Continuous Controls Monitoring (CCM) capability within an enterprise cybersecurity organization. This person will work closely with security, engineering, and architecture teams to turn cybersecurity controls into automated monitoring requirements and help bring the solution into production.
The successful candidate will serve as the business-side subject matter expert: defining what needs to be monitored, what data is required, how results should be measured, and whether the finished solution meets the intended control objectives. This is an opportunity to shape a new capability from the ground up.
Responsibilities:

• Identify and prioritize cybersecurity and technology controls for automated monitoring.
• Translate control objectives into clear requirements, monitoring logic, data needs, and measurable outcomes.
• Partner with engineering and architecture teams throughout design and development, clarifying requirements and reviewing proposed solutions.
• Lead requirements documentation, support testing and UAT, and validate monitoring results before go-live.
• Work with cybersecurity, GRC, risk, data, and engineering stakeholders to resolve gaps and make decisions.
• Help establish repeatable processes and documentation for future monitoring use cases.

Required Skills and Experience:

• Hands-on experience helping deliver an automated cybersecurity or technology control-monitoring solution, from requirements through build, testing, and production implementation.
• Strong understanding of cybersecurity controls, control objectives, and how automated monitoring supports control assurance.
• Ability to define monitoring requirements and evaluate whether outputs accurately measure the intended control.
• Comfort working with data concepts, APIs, data flows, and system integrations. Coding and SQL are not required.
• Strong business analysis skills, including requirements gathering, documentation, UAT, and stakeholder communication.
• Ability to work directly with engineers while representing the needs of cybersecurity and control stakeholders.

#LI-SC1
#TECH