Business Systems Consultant

Title: Business Systems Consultant

Location: 1525 W WT Harris Blvd Charlotte, NC

Duration: 12 months

Work Engagement: W2

Work Schedule: 3 days in office/2 days remote

Benefits on offer for this contract position: Health Insurance, Life insurance, 401K and Voluntary Benefits

Summary:

We are seeking a Business Systems Consultant to support the Perimeter Research & Application Penetration Testing (PRAPT) team within Cybersecurity. This role serves as the central coordinator for application security assessments, ensuring that testing engagements move efficiently from intake through closure.

You will act as the primary point of contact between application teams, penetration testers, Application Security Champions, and technology partners to coordinate activities, remove blockers, manage schedules, and provide visibility into assessment progress.

This is an excellent opportunity for someone with a technology background who is interested in moving closer to application security and cybersecurity operations. While hands-on penetration testing experience is not required, a practical understanding of testing processes and strong coordination skills are essential.

Responsibilities:

Assessment Coordination & Lifecycle Management

• Manage and coordinate application security assessments throughout the full engagement lifecycle, including intake, scoping, readiness validation, testing, findings review, remediation tracking, retesting, and closure.

• Serve as the primary liaison between application teams, penetration testers, Application Security Champions, and technology stakeholders.

• Coordinate assessment schedules, milestone tracking, and stakeholder communications.

• Monitor assessment progress and proactively resolve issues that could impact delivery timelines.

Readiness & Onboarding Activities

• Coordinate collection of architecture diagrams, supporting documentation, business context, and other materials required for testing.

• Validate readiness of test environments, user accounts, system access, points of contact, and other prerequisites prior to assessment execution.

• Track onboarding activities and coordinate resolution of access issues, documentation gaps, and other blockers.

• Ensure ServiceNow requests and related workflows are completed appropriately to support assessment activities.

Stakeholder Communication & Facilitation

• Facilitate communication between development teams, penetration testers, Application Security Champions, and technology partners throughout the assessment lifecycle.

• Coordinate responses to tester questions and schedule working sessions when clarification or troubleshooting is required.

• Organize and lead meetings related to readiness reviews, findings discussions, remediation tracking, retesting activities, and program updates.

• Provide clear, timely status updates to stakeholders and leadership.

Findings Management & Remediation Tracking

• Coordinate findings review and disposition activities.

• Facilitate post-assessment debrief sessions to communicate findings and remediation requirements.

• Track remediation plans, target completion dates, and outstanding risks.

• Escalate overdue remediation activities and coordinate issue resolution.

• Schedule and manage retesting activities and track closure status through completion.

• Confirm closure requirements and supporting documentation are completed for governance and compliance purposes.

Reporting & Program Operations

• Maintain assessment records, documentation, and operational metrics.

• Track assessment coverage, readiness metrics, remediation trends, retest activity, and program effectiveness.

• Develop governance, compliance, audit, management, and executive reporting materials.

• Create actionable metrics and reporting for business, cybersecurity, and leadership stakeholders.

• Support Agile work intake, backlog management, workflow hygiene, capacity planning, resource allocation, and delivery forecasting.

Qualifications:

• Applicants must be authorized to work for ANY employer in the U.S. This position is not eligible for visa sponsorship.

• Experience coordinating technology, cybersecurity, risk, application delivery, or related operational activities.

• Experience managing intake, scheduling, readiness activities, status tracking, stakeholder communication, and issue resolution across multiple concurrent initiatives.

• Experience working with application teams, technology partners, or security organizations to collect documentation, validate access requirements, and resolve onboarding issues.

• Experience tracking milestones, risks, dependencies, scope changes, remediation activities, and closure requirements using workflow or service management tools.

• Strong organizational skills with the ability to coordinate multiple workstreams simultaneously.

• Excellent verbal and written communication skills.

• Background in Application Security, Cybersecurity Operations, Security Service Delivery, Risk Management, or AppSec Program Operations.

• Familiarity with the application security assessment lifecycle, including:

• Intake

• Scoping

• Readiness Validation

• Testing

• Findings Review

• Remediation

• Retesting

• Governance Reporting

• Experience supporting vulnerability management or remediation tracking programs.

• Ability to facilitate communication across highly technical and non-technical stakeholder groups.

• Experience coordinating collection of architecture diagrams, test accounts, environment access, business context, and supporting documentation.

• Experience monitoring assessment progress, responding to tester requests, documenting status updates, and escalating blockers.

• Experience with findings review, remediation coordination, retest scheduling, and closure confirmation activities.

• Familiarity with ServiceNow, Jira, Confluence, SharePoint, Excel, PowerPoint, or similar tools.

• Strong analytical skills with the ability to develop metrics, trends, dashboards, and operational reporting.

• Foundational understanding of application security risks, vulnerability management, compliance, and governance reporting.