Business Analyst (CyberSec)/ 6 months/ Fully Remote

Business Analyst - Up to £550 per day (Inside IR35)

6+ months contract

Fully Remote

We're supporting a leading organisation undergoing significant cyber security and information security transformation and are looking for an experienced Business Analyst to join a high-profile change programme.

This role sits at the intersection of business change, cyber security, risk, compliance and technology, working closely with stakeholders across the organisation to ensure security initiatives are delivered effectively, pragmatically and with clear business outcomes.

You'll play a key role in shaping requirements, assessing impacts, identifying risks and helping translate complex security concepts into actionable business deliverables.

What You'll Be Doing

• Elicit, analyse and document business, functional, non-functional and security requirements.

• Translate cyber security objectives into clear business requirements, user stories and acceptance criteria.

• Conduct impact assessments across business processes, systems, data, access controls and operational teams.

• Collaborate with Information Security, Risk, Compliance, Technology and third-party suppliers to identify risks, dependencies and control gaps.

• Map current and future-state processes, user journeys, data flows and system interactions.

• Support solution design, testing, implementation planning, business readiness and post-deployment reviews.

• Maintain traceability between business outcomes, security controls, risks, testing activities and delivered solutions.

• Facilitate workshops and stakeholder engagement across technical and non-technical audiences.

• Provide analysis that supports informed decision-making, balancing risk reduction, implementation complexity, operational impact and delivery objectives.

What We're Looking For

• Proven experience as a Business Analyst delivering cyber security, information security, technology risk or regulatory change initiatives.

• Strong requirements gathering, process mapping and business impact assessment skills.

• Experience working with cross-functional teams spanning business, technology, security, risk and compliance.

• Ability to translate technical security concepts into business-friendly language and practical requirements.

• Strong stakeholder management, workshop facilitation and influencing skills.

• Experience analysing systems, data flows, access controls and operational processes.

• A proactive and inquisitive approach, with the ability to identify risks, assumptions and dependencies early.

• Comfortable operating in fast-paced environments and making an immediate contribution.

Desirable Experience

• Exposure to security frameworks and standards such as NIST, ISO 27001 or similar.

• Understanding of cyber risk management, data protection, operational resilience or identity & access management.

• Experience supporting cloud security, secure delivery or technology transformation programmes.

• Knowledge of Agile delivery environments and testing methodologies.

• Relevant Business Analysis qualifications (IIBA, BCS or equivalent).

• Cyber security certifications such as CISMP, CompTIA Security+ or similar are advantageous.

Why Apply?

• Work on business-critical cyber security and information security change initiatives.

• Collaborate with senior stakeholders across security, risk and technology functions.

• Fully remote UK-based contract.

• Opportunity to make a significant impact from day one within a complex transformation programme.

If you're an experienced Business Analyst with a strong background in cyber security, risk or information security change, we'd love to hear from you.