Business Analyst - Cyber Security

About the role

We are looking for an experienced Business Analyst to join a large‑scale cyber security uplift programme within a complex enterprise environment. The role will support the delivery of critical cyber capability improvements across both IT and Operational Technology (OT) domains as part of a multi‑year transformation.

Key responsibilities

• Elicit, analyse, document and manage functional, non‑functional, business, technical and control requirements for cyber uplift initiatives.
• Translate cyber risk, regulatory obligations and security standards into executable controls, user stories, acceptance criteria and process designs.
• Develop high‑quality artefacts such as requirements documentation, process maps, control designs, traceability matrices and transition materials.
• Collaborate with stakeholders, cyber SMEs, architects, OT owners and delivery teams to align scope, priorities and delivery approach.
• Support delivery across multiple workstreams, manage dependencies, ambiguity and evolving scope.
• Contribute to testing, implementation planning, operational readiness and transition to BAU support models.
• Prepare concise executive‑level reports, updates and presentations on progress, risks, issues and decisions.

Required profile

• 5+ years of experience in complex business analysis roles, preferably within cyber security programmes or regulated environments.
• Hands‑on experience delivering cyber capability uplift across integrated IT and OT environments.
• Strong understanding of security and regulatory frameworks such as AES‑CSF, SOCI or similar.
• Proven ability to manage the full requirements lifecycle from discovery through implementation and transition.

Required skills

• Identity and Access Management (IAM)
• Security Operations Centre (SOC)
• Threat and Vulnerability Management
• Security Operations
• AES‑CSF framework
• SOCI framework