Cybersecurity Business Analyst

200 - 225 PLN/ godz./ godz.B2BB2B (netto)

SeniorZdalnieFull-time·B2B

#469150·Dodano wczoraj·1

Źródło: nofluffjobs.com

Aplikuj teraz

Tech Stack / Keywords

Data analysisAPI securityCloud securityIAMNISTITILPKIAudit

Podsumowanie oferty

The Cybersecurity Business Analyst will support initiatives in the Group Cybersecurity portfolio for a telecommunications customer. The role leads structured discovery and translates cybersecurity risks and technical constraints into business requirements and delivery artefacts for a global, cross-functional programme.

Wymagania

Proven senior-level business analysis experience in complex cybersecurity, technology, risk, or compliance change.
Expertise in requirements elicitation, process analysis, traceability, workshop facilitation, testing, and operational readiness.
Ability to translate cybersecurity, risk, and technical concepts into business requirements and decisions.
Experience with RFP requirements, suppliers, global stakeholders, and hybrid delivery.
Relevant cybersecurity exposure across identity governance and administration, IAM, MFA, SSO, privileged access management, Active Directory security, security operations, logging, SIEM, SOC integration, incident readiness, vulnerability and external attack-surface management, application, API, web and cloud security, infrastructure, endpoint, network, PKI and certificate management, data security, privacy, cryptography, information protection, cyber resilience, backup, recovery, crisis readiness, continuity, OT/IoT, logistics-site security, third-party and supply-chain risk, M&A, regulatory cyber risk, security governance, control frameworks, audit, compliance, operationalisation, service management, and continuous control improvement.
Relevant degree or equivalent experience.

Nice to have:

A recognised role certification.
Broad awareness of frameworks such as NIST CSF, ISO 27001, CIS Controls, and ITIL, as well as secure delivery practices.

Obowiązki

Lead structured discovery across business, cybersecurity, technology, risk, legal, privacy, procurement, and operations stakeholders; define the problem, value hypothesis, scope, outcomes, constraints, and measurable acceptance criteria.
Elicit, analyse, reconcile, and baseline business, functional, non-functional, security, privacy, regulatory, operational, and reporting requirements using interviews, workshops, observation, document analysis, process mapping, and data analysis.
Translate cyber risks, threat scenarios, control objectives, and technical constraints into business language, decision papers, epics, user stories, use cases, process and data models, traceability matrices, and testable requirements.
Own requirements quality and lifecycle, including versioning, prioritisation, change control, impact assessment, and traceability from the original need through design, build, testing, deployment, control evidence, and benefits realisation.
Produce or coordinate programme artefacts, including demand inputs, business requirements, product descriptions, current- and future-state processes, stakeholder maps, RACI, data definitions, requirements traceability, acceptance criteria, decision logs, and readiness assessments.
Partner with security architects and subject-matter experts to ensure requirements address identity and privileged access, infrastructure and cloud protection, application and API security, data protection, vulnerability and exposure management, detection and response, resilience, OT/IoT, third-party risk, and secure operations.
Plan and facilitate workshops, playback sessions, design reviews, and sign-off forums; identify assumptions, conflicts, gaps, and dependencies and drive them towards explicit decisions.
Support sourcing and RFP processes by defining outcome-based requirements, evaluation criteria, use cases, SLAs, and security terms.

Inne informacje

The role is 100% remote, with occasional availability required for business trips.

VIRTUSA

16 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz