Information Technology Business Analyst

The Senior Cybersecurity Compliance Analyst is responsible for translating cybersecurity regulatory, legal, and industry framework requirements into actionable compliance plans that reduce organizational risk and support regulatory obligations. This role serves as a bridge between regulatory requirements and operational implementation by performing gap assessments, developing remediation roadmaps, coordinating compliance activities, and validating the effectiveness of cybersecurity controls. The ideal candidate possesses strong analytical skills, a deep understanding of cybersecurity and compliance frameworks, and the ability to collaborate across business, IT, legal, and operational teams to achieve and maintain compliance . Key Responsibilities Support day-to-day administration and continuous improvement of the Cybersecurity Compliance program, aligning activities to program objectives and risk prioritie s.· Interpret and analyze cybersecurity related laws, regulations, standards (MTSA, TSA, etc .)· Interpret and analyze privacy laws and regulations associated to our client (DPA, Texas Security and Privacy Ac t )·· Translate requirements into compliance controls, tasks, and implementation pla ns· Develop compliance roadmap and action plans to address regulatory and framework requiremen ts· Monitor changes in the regulatory landscape and assess organization impa ct· Provide recommendations for achieving and sustaining compliance with applicable cybersecurity requiremen ts· Conduct cybersecurity compliance assessment against stated requiremen ts· Perform gap analyses to identify deficiencies in processes, controls, documentation and governance practic es· Document assessment results and findin gs· Drive cross-functional collaboration with Legal, HR, Internal Audit, Supply Chain, and business units to ensure effective program executio n.· Work closely with SMESs, Information Technology, Operational Technology, Legal, Operations and business stakeholde rs· Coordinate compliance training initiatives with key stakeholders and SMEs, including assignments, communications, tracking, and reportin g.· Develop and maintain recurring compliance dashboards and analytics across policy governanc e.· Consolidate and analyze program data to identify trends, key risk indicators, policy exceptions, and improvement opportunities; present insights to leadershi p.· Prepare executive-level reports and presentation materials for Compliance Committee meetings and other governance forum s.Education And Experien ce· Bachelor's degree in business administration, Information Security, Risk Management, compliance, or a related fie ld· 3-5+ years of experience in compliance, risk management, privacy, cybersecurity GRC or related corporate governance function s.· Experience conducting cybersecurity assessments and gap analys es· Experience translating regulations into actionable pla ns· Hands-on experience building and executing program s.· Proven ability to prepare executive-level reports and presentations for governance forum s.· Knowledge of cybersecurity regulations and frameworks such a s:o NIST Cybersecurity Framewo rko NIST 800-1 71o CIS Contro lso Data Processing Agreeme nto Texas Data Privacy and Security A cto Martine Transportation Security Act (MT SA· Professional certifications are a pl us Knowledge, Skills, And Abilit ies · Strong understanding of cybersecurity compliance program elem ents· Advanced data analysis and reporting skills; proficiency with Power BI, Excel, and data visualization best practi ces.· Excellent written and verbal communication skills with the ability to translate complex information into clear, executive-ready insig hts.· Exceptional attention to detail, documentation discipline, and process orientat ion.· Ability to manage multiple priorities with minimal supervision and deliver on deadlines in a dynamic environm ent.· Collaborative mindset with strong stakeholder management across Legal, HR, Internal Audit, Procurement, and business te ams.· Sound judgment, discretion, and integrity when handling sensitive informat ion.