Sr. Business Analyst

Job Summary

We are seeking an experienced Senior Business Analyst to support an integrated Governance, Risk, and Process Management Program focused on modernizing IT governance, strengthening management controls, integrating enterprise risk management, and improving business processes through structured process management and continuous improvement.

The ideal candidate will have strong experience in business analysis, governance, risk management, process improvement, operating-model development, and stakeholder management. This individual will work closely with executives, program managers, technical teams, process owners, service owners, and other stakeholders to identify and prioritize governance topics, risks, issues, taskers, control gaps, process improvements, and operational decisions.

The role requires the ability to analyze complex business environments, develop practical recommendations, establish standardized processes and controls, and translate findings into actionable roadmaps, documentation, dashboards, and implementation plans.

Key Responsibilities

Assess current governance, risk management, tasker management, controls, and business processes, including roles, responsibilities, decision rights, workflows, documentation, tools, metrics, and organizational maturity.

Develop and support target operating models defining governance structures, process ownership, risk ownership, decision authorities, escalation paths, intake processes, and continuous-improvement responsibilities.

Apply and expand COBIT-aligned governance, management objectives, practices, controls, and performance measures across appropriate IT governance and management functions.

Map existing governance, risk, tasker, and process controls to applicable COBIT objectives and identify gaps, redundancies, dependencies, and improvement opportunities.

Develop and maintain prioritized transformation and process-improvement roadmaps, including milestones, dependencies, resources, risks, and measurable outcomes.

Establish standardized processes for intake, evaluation, prioritization, review, approval, escalation, tracking, closure, and change control.

Develop and maintain governance, risk, issue, tasker, decision, process, and improvement registers, logs, inventories, and backlogs.

Establish risk-management frameworks, including risk categories, scoring criteria, likelihood and impact definitions, risk levels, residual-risk measures, escalation thresholds, and risk-acceptance procedures.

Support risk-treatment planning by identifying accountable owners, mitigation activities, milek, business value, effort, dependencies, and organizational readiness.

Design future-state processes with clearly defined ownership, activities, decision points, controls, roles, service expectations, escalation paths, and performance measures.

Develop implementation-ready documentation, including process maps, SOPs, work instructions, charters, checklists, templates, RACI/responsibility matrices, control descriptions, decision logs, and reporting formats.

Support the development and operation of a Tasker Tracking System for assignment, ownership, due dates, workflow, notifications, escalations, completion, evidence retention, and reporting.

Develop executive dashboards and recurring reports covering governance activities, decisions, taskers, risk posture, treatment progress, process-improvement initiatives, performance measures, dependencies, and implementation status.

Facilitate recurring governance, risk, process-management, and stakeholder working sessions with executives, program managers, technical teams, process owners, and governance bodies.

Support organizational change and adoption through stakeholder coordination, communications, training, readiness reviews, adoption assessments, Communities of Practice, and stabilization activities.

Conduct recurring maturity and effectiveness assessments, lessons-learned reviews, and continuous-improvement activities to enhance governance, risk practices, processes, controls, metrics, tools, and organizational practices.

Required Qualifications

Bachelor's degree in Business Administration, Information Technology, Computer Science, Management, or a related field, or equivalent experience.

7+ years of experience in business analysis, process management, governance, risk management, or a related discipline.

Demonstrated experience analyzing and improving complex enterprise or IT business processes.

Experience developing current-state/future-state process models, requirements, workflows, SOPs, and operating models.

Strong understanding of IT governance, risk management, internal controls, and process management.

Experience with COBIT or other recognized IT governance/control frameworks.

Experience developing and maintaining risk registers, action trackers, decision logs, process inventories, dashboards, and management reports.

• Strong analytical, documentation, facilitation, and presentation skills.
• Ability to work effectively with executive leadership and cross-functional stakeholders.

Experience identifying process gaps, evaluating improvement opportunities, and developing actionable recommendations.

Strong ability to manage multiple priorities, dependencies, and stakeholders in a complex environment.

Preferred Qualifications

• Experience supporting federal government or public-sector IT organizations.
• Experience with COBIT 2019 or comparable governance frameworks.
• Knowledge of enterprise risk management, internal controls, and compliance frameworks.
• Experience with tasker/action-item management systems and executive reporting.
• Experience with organizational change management and stakeholder adoption.

Relevant certifications such as CBAP, PMP, CISM, CRISC, CGEIT, ITIL, or COBIT-related credentials are a plus.stones, resource requirements, expected outcomes, and completion criteria.

Integrate risk and governance information into strategic planning, portfolio reviews, budget planning, vendor oversight, performance management, and executive decision-making.

Conduct business process discovery and analysis through interviews, workshops, document reviews, observation, data analysis, and system analysis.

Develop current-state and future-state process maps and identify fragmentation, duplication, bottlenecks, unnecessary handoffs, rework, control gaps, unclear ownership, and other performance issues.