Cybersecurity Business Analyst

23.5k - 28.6k PLN23 520 - 28 560 PLN/ mies./ mies.B2BB2B (netto)

SeniorZdalnieFull-time·B2B

#467934·Dodano wczoraj·0

Źródło: nofluffjobs.com

Aplikuj teraz

Tech Stack / Keywords

Business analysisCybersecuritySecurityData analysisUser storiesUse casesData modelsTestingCloudAPIIoTUATWorkshop facilitationDegreeNISTISOCISITILIAMMFASSOActive Directory SIEMCloud securityPKICryptographyAudit

Podsumowanie oferty

Provide cybersecurity-focused business analysis for customer initiatives in the Group Cybersecurity portfolio, across discovery, delivery, and selected run-and-maintain improvements. Translate cyber risks and technical constraints into business requirements, decision materials, and testable outcomes.

Wymagania

Proven senior-level business analysis experience in complex cybersecurity, technology, risk, or compliance change.
Expertise in requirements elicitation, process analysis, traceability, workshop facilitation, testing, and operational readiness.
Ability to translate cybersecurity, risk, and technical concepts into business requirements and decisions.
Experience with RFP requirements, suppliers, global stakeholders, and hybrid delivery.
Professional proficiency in English.
Relevant degree or equivalent experience.

Nice to have:

A recognised role certification is preferred.
Broad awareness of frameworks such as NIST CSF, ISO 27001, CIS Controls, and ITIL, as well as secure delivery practices.

Obowiązki

Lead discovery across business, cybersecurity, technology, risk, legal, privacy, procurement, and operations stakeholders; define the problem, scope, outcomes, constraints, and acceptance criteria.
Elicit, analyse, reconcile, and baseline business, functional, non-functional, security, privacy, regulatory, operational, and reporting requirements.
Translate cyber risks, threat scenarios, control objectives, and technical constraints into business requirements, decision papers, epics, user stories, use cases, process and data models, traceability matrices, and testable requirements.
Own requirements quality and lifecycle, including prioritisation, change control, impact assessment, and traceability through design, build, testing, deployment, control evidence, and benefits realisation.
Produce or coordinate programme artefacts, including business requirements, product descriptions, current- and future-state processes, stakeholder maps, data definitions, acceptance criteria, decision logs, and readiness assessments.
Partner with security architects and subject-matter experts on requirements covering identity and privileged access, infrastructure and cloud protection, application and API security, data protection, vulnerability management, detection and response, resilience, OT/IoT, third-party risk, and secure operations.
Plan and facilitate workshops, playback sessions, design reviews, and sign-off forums; identify assumptions, conflicts, gaps, and dependencies, and drive them towards explicit decisions.
Provide outputs including a problem statement, scope, outcomes, stakeholder map, process views, prioritised backlog, traceability and change-impact records, workshop logs, RFP requirements and supplier-evaluation inputs, test scenarios, UAT support, readiness and adoption inputs, transition-to-run materials, and benefits-review inputs.

Darize

90 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz