Jobs at Providence Health & Services (Now Hiring) — 29 open

Role Summary

The Cybersecurity Business Analyst & Technical Writer is responsible for documenting, analyzing, and standardizing cybersecurity business processes with a strong focus on Identity & Access Management (IAM), governance workflows, exception management, and cybersecurity policies. The role partners with Cybersecurity Engineering, IAM, GRC, Risk, Compliance, Legal, and IT teams to translate complex technical and operational practices into clear, accurate, and audit-ready documentation.

Cybersecurity Business Process Documentation (IAM & GRC)

• Document current-state (as-is) and future-state (to-be) IAM and cybersecurity business processes.
• Capture IAM Joiner–Mover–Leaver (JML), access request, approval, provisioning, and de-provisioning workflows.
• Document privileged access, service account, and identity governance processes.
• Develop process narratives, swim-lane diagrams, and workflow documentation.
• Identify gaps, inefficiencies, and improvement opportunities in existing processes.

Governance & Exception Management Documentation

• Document cybersecurity governance models, decision forums, and approval workflows.
• Capture end-to-end security exception and risk acceptance processes.
• Document exception intake, assessment, approval, tracking, renewal, and closure workflows.
• Ensure traceability between policies, standards, controls, and approved exceptions.

Cybersecurity Policy, Standards & Procedure Writing

• Author, review, and maintain cybersecurity policies, standards, procedures, and guidelines.
• Translate regulatory and framework requirements into clear, business-friendly documentation.
• Ensure documentation accuracy while maintaining technical correctness.
• Support policy lifecycle management including periodic reviews and updates.

Stakeholder Engagement & Requirements Analysis

• Engage with Cybersecurity, IT, Risk, Compliance, and business stakeholders to gather requirements.
• Facilitate workshops and working sessions to validate documented processes.
• Ensure documentation reflects approved governance decisions and real-world operations.

Audit, Compliance & Knowledge Management Support

• Ensure documentation is audit-ready and supports regulatory and compliance requirements.
• Support internal and external audits by providing process and policy documentation.
• Maintain centralized documentation repositories and version control.
• Define documentation standards, templates, and naming conventions.

Required Skills & Experience

• 5–8 years of experience as a Cybersecurity Business Analyst, Technical Writer, or GRC/IAM documentation specialist.
• Strong experience documenting IAM processes, governance workflows, and cybersecurity operating models.
• Excellent written communication and documentation skills.
• Strong understanding of cybersecurity concepts such as access control, least privilege, and risk acceptance.
• Experience working closely with cybersecurity and IT teams.

Preferred Qualifications

• Experience in healthcare or other highly regulated industries.
• Familiarity with NIST CSF, ISO 27001, CIS Controls, or HIPAA (documentation context).
• Exposure to IAM platforms such as SailPoint, Entra ID, Active Directory, or PAM tools.
• Experience with documentation and diagramming tools such as Confluence, SharePoint, Visio, or Lucidchart.

Behavioral & Professional Competencies

• Exceptional attention to detail and documentation discipline.
• Strong analytical and process-oriented mindset.
• Ability to translate complex technical content into clear, structured language.
• Strong collaboration and facilitation skills.