Business System Analyst

** THIS OPPORTUNITY IS NOT OPEN TO SUB VENDOR SUBMITTALS. THIS IS A HYBRID ROLE AND CANDIDATES MUST BE LOCATED IN ROCHESTER OR BUFFALO. THANK YOU!

Business Systems Analyst II – Patch Management & IT Compliance

The Business Systems Analyst II (Patch Management) supports enterprise patch governance and IT change management processes, ensuring accurate coordination, documentation, and reporting of patching activities across infrastructure and application environments.

This role acts as a key liaison between technical teams (infrastructure, vulnerability management, CMDB, and patch deployment teams) and business stakeholders. The analyst ensures requirements are clearly defined, data is consistent across systems, and patch compliance reporting is accurate, reliable, and aligned with organizational risk and regulatory standards.

Success in this role requires strong analytical thinking, structured requirements gathering, and the ability to resolve ambiguity across competing stakeholder and system perspectives.

Key Responsibilities Requirements & Stakeholder Management

• Elicit, document, and validate business and technical requirements related to patch management and IT compliance reporting
• Facilitate discussions between business stakeholders and technical teams to resolve conflicting requirements and align priorities.
• Translate business needs into clear, structured documentation including user stories, process flows, and functional requirements.
• Ensure requirements are complete, testable, and traceable through implementation and testing phases

Patch Management & Change Coordination

• Support coordination of patching schedules and change activities across infrastructure and application teams
• Act as a liaison between patch management operations and stakeholder groups to ensure clear communication of requirements, timelines, and impacts.
• Maintain documentation of patch deployment plans, change schedules, and related operational processes.

Data Analysis & Reporting

• Analyze and reconcile patch compliance data across multiple systems including CMDB, vulnerability scanning tools, and patch deployment platforms
• Perform data mapping and lineage analysis to identify inconsistencies and define authoritative data source
• Support resolution of discrepancies in compliance reporting through structured root cause analysis and stakeholder alignment

Process & Solution Design

• Document current-state and future-state processes using workflow tools such as Visio
• Conduct gap analysis to identify process inefficiencies and improvement opportunities
• Develop supporting artifacts such as process flows, data mappings, and test cases

Change & Risk Management

• Support adherence to IT risk management, regulatory requirements, and internal control standards
• Identify and escalate risks or control gaps in alignment with organizational risk appetite
• Ensure audit and regulatory requirements are met through proper documentation and evidence tracking

General Responsibilities

• Provide clear and consistent status updates to stakeholders and management
• Participate in meetings, workshops, and cross-functional discussions to support delivery objectives
• Contribute to a collaborative, inclusive, and high-performing team environment
• Perform additional duties as assigned

Required Qualifications

• 4 years of combined education and/or experience in business analysis, IT operations, or related field
• Experience working with IT Service Management (ITSM) tools such as ServiceNow, Jira, or similar platforms
• Strong ability to gather, analyze, and document technical and business requirements
• Experience communicating technical concepts to both technical and non-technical stakeholders
• Strong problem-solving skills, particularly in ambiguous or time-sensitive environment
• Experience producing structured documentation (requirements, user stories, process flows, or test cases
• Strong organizational skills with the ability to manage multiple priorities and stakeholders