Business Analyst

Location: Fully Remote - Based in USA

Department: Healthcare Transformation

Job Description:

We are seeking a Business Analyst / ATO Support Analyst to support business requirements gathering, documentation, and ATO maintenance for the VA OAA Data Management Center (DMC) application portfolio under the active VA-wide umbrella ATO (FIPS 199 Moderate).
In this role, you will serve as the bridge between business users, developers, and information security stakeholders and will obtain individual VA system access authorization within one month of the contract start date.

Responsibilities:

▪ Support business requirements gathering, documentation, and ATO maintenance for the DMC application portfolio under the active VA-wide umbrella ATO (FIPS 199 Moderate)
▪ Serve as a bridge between business users, developers, and information security stakeholders
▪ Obtain individual VA system access authorization within one month of contract start; this is an individual onboarding expectation only, as system-level ATO decisions are made solely by Government authorization officials
▪ Collect and document business and functional requirements
▪ Create, update, and maintain all ATO artifacts, including SSP updates, control narratives, software scan evidence, POA&M remediation tracking, system descriptions, site maps, wireframes, database diagrams, code documentation, and data flow documentation
▪ Coordinate with developers and data staff to document system changes
▪ Track and support remediation actions resulting from security scans
▪ Support audits, reviews, and compliance requests related to DMC systems

Minimum Qualifications:

▪ Bachelors degree in Business Administration, Information Systems, Computer Science, or a related field; no equivalencies accepted
▪ 4+ years of experience in business analysis, system documentation, and security compliance support
▪ Familiarity with VA ATO/RMF processes and NIST security frameworks

Preferred Qualifications:

▪ Security or audit-related certifications, such as CISSP, CAP, or Security+
▪ Experience producing SSPs, control narratives, and POA&M documentation

Eligibility:

▪ Must be legally authorized to work in the United States without employer sponsorship, now or at any time in the future
▪ Must be able to obtain and maintain the required federal Public Trust clearance for this role

Compensation:

Salary for this position is determined by various factors, including but not limited to, location, the candidate’s particular combination of knowledge, skills, competencies, and experience, as well as contract specific affordability and organizational requirements. The proposed salary range for this position is outlined below.

Salary Range: $90,000 - $115,000.

Blue Water Thinking offers a comprehensive benefits package including health insurance (medical, dental and vision), paid time off, federal holidays, and matching 401K plan.