Job Overview
We are seeking an experienced Information Security Business Analyst (Level 2) to bridge cybersecurity, data analytics, and business operations. This role is ideal for a hands-on professional who can translate complex security data into meaningful executive insights and partner effectively with stakeholders across the organization. Candidates who demonstrate strong cybersecurity knowledge, advanced data visualization skills, and business acumen will be prioritized for interview consideration.

Must Haves

• Proven experience in information security, cybersecurity operations, or a related technical security function

• Ability to draft or contribute to cybersecurity policies and standards

• Hands-on expertise with data visualization tools such as Power BI or Tableau

• Strong analytical mindset with experience defining KPIs and performance metrics

• Experience partnering with business stakeholders to gather requirements and translate needs into measurable outcomes

• Working knowledge of risk assessments, security incidents, and IT controls

• Excellent communication skills, including the ability to present to executive leadership

• Bachelor’s degree in a related field or equivalent professional experience

What the Client Needs You to Do

• Design and implement a cybersecurity metrics framework that provides visibility into performance, risk, and operational effectiveness

• Develop executive-level dashboards that synthesize complex security data into clear, strategic insights

• Partner with business leaders and risk teams to identify available data sources and define meaningful KPIs

• Contribute beyond analytics by supporting broader security operations initiatives as needed

Key Responsibilities

• Establish and maintain cybersecurity performance metrics aligned to organizational goals

• Build and maintain executive dashboards that report on incidents, remediation efforts, risk findings, and training compliance

• Analyze data from multiple security domains and translate findings into actionable recommendations

• Facilitate meetings with business owners to identify reporting needs and data gaps

• Collaborate with risk management and audit teams to support compliance initiatives

• Assist with cybersecurity policy development and documentation updates

• Support awareness and training programs through reporting and measurement of effectiveness

• Provide cross-functional support to fellow analysts within security operations

• Present insights and trends to leadership in a concise, business-focused format

• Continuously refine reporting processes to improve clarity, efficiency, and impact

Additional Information

• This is a hybrid position requiring on-site presence one day per week (Wednesdays).

• Relocation assistance is not available.

• The team offers strong career mobility. High performers may expand into advanced data analytics roles, transition into security operations, or grow within the business operations function depending on strengths and career interests.

This role requires a professional who not only understands cybersecurity fundamentals but can also operationalize data and communicate strategy effectively. If you are equally comfortable working with technical controls, business stakeholders, and executive leadership, we encourage you to apply.

W2 employees of Overture Partners who work 30 or more hours per week are eligible for the following benefits: medical (choice of 3 plans), 401(k) starting on day one, a variety of voluntary benefits including life and disability insurance, and sick time if required by law in the worked-in state/locality.

#25321

Job Overview

This role leads advanced application and cloud security initiatives within a growing cybersecurity function. The position focuses on secure software development practices, cloud security architecture, and driving improvement across engineering teams. Candidates who demonstrate deep technical expertise, proven leadership, and experience building security programs will be prioritized for interviews.

Must Haves

• 5+ years in application security, cloud security, or related cybersecurity engineering roles
• Expertise in secure development practices, SSDLC, and modern application architectures
• Hands-on experience with security testing tools (SAST, DAST, IAST, SCA)
• Strong cloud security capabilities across major platforms (AWS, Azure, or GCP)
• Experience designing or maturing DevSecOps programs and CI/CD security controls
• Ability to lead security projects, mentor engineers, and influence cross-functional teams
• Strong communication skills with the ability to translate complex security concepts
• Relevant certifications preferred (such as CISSP, CCSP, CSSLP, GIAC, cloud security specialties)

What the Client Needs You to Do

This role strengthens the organization’s application and cloud security posture by shaping strategy, executing roadmap initiatives, and embedding security throughout development pipelines. You will collaborate with engineering, DevOps, and operational teams to integrate strong controls into daily work, while guiding engineers and promoting a culture of secure design.

Key Responsibilities

• Design and evolve the application and cloud security program, ensuring alignment with organizational needs
• Build and maintain a structured SSDLC with security gates, threat modeling, and secure coding standards
• Develop, test, and implement advanced controls for application and cloud environments
• Drive adoption and refinement of Cloud Security Posture Management capabilities
• Integrate code analysis tools into development workflows and support developers with remediation guidance
• Mentor junior and mid-level engineers through technical coaching and strategic direction
• Partner closely with development and DevOps teams to embed security into pipelines and deployment processes
• Conduct and oversee assessments including code reviews, penetration testing, configuration audits, and vulnerability management
• Research, evaluate, and recommend emerging security tools and architectural approaches
• Lead incident response efforts for application and cloud-related events, driving rapid mitigation
• Engage external partners and vendors to align tooling and practices with industry expectations
• Ensure all practices align with organizational values and demonstrate commitment to continuous improvement
• Perform additional security-related tasks as assigned

Additional Information

• Bachelor’s degree in a technical field or equivalent professional experience required; advanced education preferred
• Strong understanding of modern dev environments, microservices, APIs, and container security
• Familiarity with common frameworks such as OWASP, NIST CSF, and NIST 800-53
• Ability to manage large initiatives, communicate across teams, and influence strategic decisions
• Proficiency with standard productivity tools (e.g., M365)
• Hybrid schedule required: generally 1–2 days onsite per week depending on business needs
• Remote work requires a secure, stable, and compliant workspace
• Standard business hours based on Eastern time

W2 employees of Overture Partners who work 30 or more hours per week are eligible for the following benefits: medical (choice of 3 plans), 401(k) starting on day one, a variety of voluntary benefits including life and disability insurance, and sick time if required by law in the worked-in state/locality.

#25255