Business Analyst, CyberSec

Posted 1hrs ago

Employment Information

Education
Salary
Experience
Job Type

Report this job

Job expired or something wrong with this job?

Job Description

Business Analyst supporting cyber security and information security transformation for a leading UK organisation. Eliciting requirements, assessing risks and coordinating delivery across business, technology, security and compliance teams.

Responsibilities:

  • Elicit, analyse and document business, functional, non-functional and security requirements
  • Translate cyber security objectives into clear business requirements, user stories and acceptance criteria
  • Conduct impact assessments across business processes, systems, data, access controls and operational teams
  • Collaborate with Information Security, Risk, Compliance, Technology and third-party suppliers to identify risks, dependencies and control gaps
  • Map current and future-state processes, user journeys, data flows and system interactions
  • Support solution design, testing, implementation planning, business readiness and post-deployment reviews
  • Maintain traceability between business outcomes, security controls, risks, testing activities and delivered solutions
  • Facilitate workshops and stakeholder engagement across technical and non-technical audiences
  • Provide analysis supporting decision-making across risk reduction, implementation complexity, operational impact and delivery objectives

Requirements:

  • Proven experience as a Business Analyst delivering cyber security, information security, technology risk or regulatory change initiatives
  • Strong requirements gathering, process mapping and business impact assessment skills
  • Experience working with cross-functional teams spanning business, technology, security, risk and compliance
  • Ability to translate technical security concepts into business-friendly language and practical requirements
  • Strong stakeholder management, workshop facilitation and influencing skills
  • Experience analysing systems, data flows, access controls and operational processes
  • Proactive and inquisitive approach, identifying risks, assumptions and dependencies early
  • Comfortable operating in fast-paced environments and making an immediate contribution
  • Desirable: exposure to NIST, ISO 27001 or similar security frameworks and standards
  • Desirable: understanding of cyber risk management, data protection, operational resilience or identity and access management
  • Desirable: experience supporting cloud security, secure delivery or technology transformation programmes
  • Desirable: knowledge of Agile delivery environments and testing methodologies
  • Desirable: relevant Business Analysis qualifications such as IIBA, BCS or equivalent
  • Desirable: cyber security certifications such as CISMP, CompTIA Security+ or similar

Benefits:

  • Fully remote working arrangement
  • Opportunity to work on business-critical cyber security and information security change initiatives
  • Collaboration with senior stakeholders across security, risk and technology functions
  • Opportunity to make a significant impact from day one within a complex transformation programme