Business Analyst - Cyber Security

About the role

We are looking for an experienced Business Analyst to join a large‑scale cyber security uplift programme within a complex enterprise environment. The role will support the delivery of critical cyber capability improvements across both IT and Operational Technology (OT) domains as part of a multi‑year transformation.

Key responsibilities

• Elicit, analyse, document and manage functional, non‑functional, business, technical and control requirements across cyber uplift initiatives.
• Manage the full requirements lifecycle from discovery through implementation and transition.
• Translate cyber risk, regulatory obligations and security standards into executable controls, user stories, acceptance criteria and process designs.
• Develop high‑quality artefacts such as requirements documentation, process maps, control designs, traceability matrices and business rules.
• Collaborate with stakeholders, cyber SMEs, architects, OT owners and delivery teams to align scope, priorities and delivery approach.
• Support delivery across multiple workstreams, handling dependencies, ambiguity and evolving scope.
• Contribute to testing, implementation planning, operational readiness and transition to BAU support models.
• Prepare concise executive‑level reports, updates and presentations covering progress, risks, issues and decisions.

Required profile

• 5+ years of experience in complex business analysis roles, preferably within cyber security programmes or regulated environments.
• Hands‑on experience delivering cyber capability uplift across integrated IT and OT environments.
• Strong understanding of security and regulatory frameworks such as AES‑CSF, SOCI or similar.
• Proven ability to elicit, document and manage business, functional, non‑functional, technical and control requirements.
• Experience working across both Agile and Waterfall delivery models.

Required skills

• Identity and Access Management (IAM)
• Security Operations Centre (SOC)
• Threat and Vulnerability Management
• Security Operations (SecOps)
• IT and Operational Technology (OT) environments
• Security frameworks: AES‑CSF, SOCI