Cybersecurity Business Analyst
Description
Key Outputs
• Approved problem statement, scope, outcomes, and stakeholder map • Current-state and target-state process views
• Business, functional, non-functional, and security requirements • Prioritised backlog, use cases, user stories, and acceptance criteria
• Requirements traceability and change-impact records
• Data definitions, interface needs, and reporting requirements
• Workshop outputs, decisions, assumptions, and action logs
• RFP requirements pack and supplier evaluation inputs
• Test scenarios, UAT support, and acceptance evidence
• Change-impact, readiness, and adoption inputs
• Operational readiness and transition-to-run pack
• Benefits measures and post-implementation review inputs
• Expertise in requirements elicitation, process analysis, traceability, workshop facilitation, testing, and operational readiness.
• Ability to translate cybersecurity, risk, and technical concepts into business requirements and decisions.
• Experience with RFP requirements, suppliers, global stakeholders, and hybrid delivery.
• Professional proficiency in English.
• Relevant degree or equivalent experience. A recognised role certification is preferred.
• Broad awareness of frameworks such as NIST CSF, ISO 27001, CIS Controls, and ITIL, as well as secure delivery practices, is desirable.
