Come build, innovate, disrupt, and thrive!
KēSTA I.T is actively seeking a Business Analyst for an immediate contract engagement with our government client.
Work Location: This position is Hybrid
Job Description:
We Are Seeking a detail-oriented Business Analyst to support risk management, security compliance, and policy development activities within a regulated technology environment. This role is responsible for developing and maintaining risk policies, supporting compliance initiatives, identifying policy improvement opportunities, and coordinating cross-functional efforts to strengthen security and governance practices. The Business Analyst will also support risk mitigation planning and help ensure alignment between organizational policies and established security frameworks.
Responsibilities:
· Develop, review, and implement risk policies, standards, and procedures to address audit findings and compliance gaps.
· Support security accreditation processes by aligning policies with risk management plans and remediation activities.
· Review existing policies and identify opportunities to improve efficiency and alignment with security frameworks.
· Provide risk-based recommendations and assist with mitigation planning and resolution strategies.
· Assess the potential impact of policy changes and manage updates accordingly.
· Facilitate cross-functional meetings to develop consensus on risk and compliance initiatives.
· Communicate security policies, standards, and risk management practices across technical and business teams.
· Gather stakeholder feedback to improve policy effectiveness and adoption.
· Support processes that streamline policy management and governance activities.
· Assist with documentation related to risk management, compliance tracking, and audit readiness.
· Support application security review activities and compliance reporting processes.
Required Skills:
· 1–2+ years of experience working with security and compliance frameworks such as CJIS, NIST, and FERPA.
· Experience supporting Freedom of Information Act (FOIA) processes.
· Experience working with governance, risk, and compliance tools such as Keylight.
· Experience developing or maintaining System Security Plans (SSPs).
· Experience supporting application security scanning processes.
· Experience managing Plans of Action and Milestones (POAMs).
· Strong written and verbal communication skills.
· Strong customer service and stakeholder engagement skills.
· Strong organizational and documentation skills.
· Bachelor’s degree in Information Technology, Business, Cybersecurity, or a related field.
Preferred Skills
· Experience supporting risk management or compliance programs.
· Experience supporting audit remediation activities.
· Experience working in regulated or compliance-driven environments.
· Familiarity with security governance processes and policy lifecycle management.
· Experience facilitating meetings and coordinating cross-functional initiatives.
Available Benefits:
· Medical Benefits (Platinum level plans available)
· Work from home / Hybrid / Onsite options
· PTO
· Holiday Pay
· VTO
· 401K
· Charitable Match
· Training reimbursement
About KēSTA I.T.:
Our name says it all; KēSTA I.T. (Keys-to-I.T.) AND our people are our keys to our success!
KēSTA I.T. is a premier Utah-based technical staffing and consulting services firm. We specialize in temporary and permanent placement of Software, Hardware, Network, Cloud, CRM/ERP, Data, End-User support, Web and Executive / leadership-based positions on a full time and consulting basis.
If you're interested in a role where top performance is rewarded, personal time is valued, and excellence is demanded at every level we want to talk to you today!
Where do you want to go? We've got the keys! ~ KēSTA I.T.