Business Analyst

Custom Software Systems, Inc. (CSS) is seeking a mid-level Business Analyst to anchor compliance work and to bring the same analytical discipline to application development support. On the governance side, this means owning the documentation and coordination work that keeps clients’ system portfolio compliant: system security plans, ATO cycles, PIA reviews, data classification, and records obligations. On the application side, it means working alongside the development team to determine what applications should do — translating what program staff describes into structured requirements that developers can build against. This IT section is small. Governance, business analysis, and project coordination are notseparate departments here — they are responsibilities the same small group shares fluidly. Thisrole will work directly with the economists, bank examiners, policy analysts, and attorneyswhose work both generates the compliance obligations and drives the application backlog. Thegovernance work and the application work are not as separate as they might appear: a PIA for anew system and a requirements document for that same system draw on the same conversations.ResponsibilitiesIT Governance and Compliance· Maintain and update FISMA documentation for the client’s IT system portfolio, includingsystem security plans (SSPs), security categorizations, and related artifacts.· Coordinate the Authority to Operate (ATO) process for applicable systems, includingworking with the clients’ security and privacy offices through assessment andauthorization cycles.· Draft, review, and maintain Privacy Impact Assessments (PIAs) for client systems thatcollect, process, or maintain personally identifiable information.· Maintain clients' IT system inventory, ensuring records are current and aligned withagency reporting requirements.· Support data governance and privacy obligations, including data classification, recordsmanagement, and retention schedule compliance.· Serve as a working-level point of contact with the client's security, privacy, andcompliance functions on matters related to DCCA’s IT systems and application portfolio.· Identify and escalate compliance gaps or changes in system posture that may requireupdated documentation or reassessment.· Prepare and maintain documentation packages for periodic reviews, assessments, andaudits.Business Analysis and Requirements· Work directly with client program staff — economists, policy analysts, bank examiners,and attorneys — to elicit, refine, and document business requirements for new andmodified applications.· Translate stakeholder descriptions of workflow and data needs into structuredrequirements, process diagrams, and functional specifications that the developmentteam can act on.· Develop and maintain process flow diagrams, use cases, and data flow documentationto support application design and, where applicable, governance activities.· Help prioritize and scope requirements in coordination with the technical lead and projectmanager, surfacing dependencies and tradeoffs early.· Contribute to user acceptance testing by developing test cases, coordinating withbusiness users, and documenting outcomes.· Bridge communication between technical developers and business stakeholders,reducing friction during discovery, design, and delivery. This role will participate in QA activities — contributing test cases, supporting UAT coordination,and helping verify that delivered applications meet business requirements — but does not serveas a dedicated QA resource. Testing support is a component of the BA function here, not aprimary accountability.Citizenship· US CitizenshipRequired Qualifications· Demonstrated experience with FISMA compliance documentation, including systemsecurity plans, security categorizations, and related assessment and authorizationartifacts.· Experience drafting or maintaining Privacy Impact Assessments for systems thatprocess personally identifiable information.· Familiarity with NIST frameworks applicable to federal IT compliance, including NIST SP800-53 and NIST SP 800-37.· Experience supporting or coordinating ATO processes, including preparingdocumentation for security assessments.· Experience with IT system inventory maintenance and data governance or recordsmanagement obligations.· Demonstrated experience in business requirements gathering and documentation,including process flow diagrams, use cases, or functional specifications.· Ability to work directly with senior subject matter experts — economists, policy analysts,attorneys, and program staff — to develop requirements and designs; skill at uncoveringunderlying business needs, which may require significant effort to surface.· Strong written communication skills: compliance and governance work here is documentation-intensive.Preferred Qualifications· Prior experience in a U.S. federal government environment, particularly in a regulatory,supervisory, or policy-adjacent context.· Familiarity with the Board’s or similar agency’s privacy and information securityframeworks.· Experience with process modeling tools such as Visio, Lucidchart, or similar.· Familiarity with Microsoft Power Platform applications or SharePoint Online in abusiness context (not development).· Experience coordinating UAT efforts with non-technical business users.· Coursework or certification in information security, privacy, or records management(e.g., CIPP, CISSP, CRM, or equivalent) is a plus but not required.Work Environment & Schedule· Full-time position.· On-site presence is required during the initial onboarding and ramp-up period(approximately 6–8 weeks).· Transition to full-time teleworking following successful onboarding.· Collaborative, delivery-focused team environment.This job description reflects current program needs and may evolve as modernization effortsprogress.Compensation & Benefits· Wage Range: Negotiable· General Benefits: Custom Software Systems, Inc. offers our employees a competitive benefits package that may include: ü Health insurance plansü Health Savings Account (HSA)ü Dentalü Visionü Long-term disabilityü Short-term disabilityü Basic term life insuranceü Supplemental term life insurance for employees, spouses, and dependentsü Simple IRAü Parking/Commuting expense reimbursementü Training/Education Company DescriptionCompany Background:Headquartered in Leesburg, Virginia, Custom Software Systems, Inc. (CSS) is a Woman-Owned (WOSB) and HUBZone certified small business. Built on a foundation of trusted client partnerships, CSS has fostered a stakeholder-centric yet disciplined approach to IT solutions development. This ensures our ability to consistently meet or exceed our customers' expectations. Benefits:CSS is a very employee oriented company knowing that well trained, professional associates are what make our company great. We offer a competitive benefits package that includes: paid holidays and paid time off; medical insurance that includes vision; dental insurance; company paid long and short-term disability and life insurance; a Simple IRA plan (similar to 401k); parking and commuter reimbursement. We also work with our employees on training and professional certification plans that benefit the employee, the client and CSS - a win-win-win strategy.Equal Opportunity Employer:CSS provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. CSS complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.CSS expressly prohibits any form of unlawful employee harassment based on race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. Improper interference with the ability of CSS employees to perform their expected job duties is absolutely not tolerated.

Salary : $21