Cyber Business Analyst

Ideal candidate for this role is an experienced Cyber Business Analyst with strong expertise in cybersecurity, IAM/PAM transformation, regulatory compliance, and data-driven analysis, responsible for supporting cyber maturity initiatives and aligning cybersecurity programmes with business and regulatory requirements.

Key Responsibilities

• Gather, analyze, and document business, technical, and regulatory requirements for cybersecurity initiatives, particularly within IAM and PAM domains.
• Support IAM/PAM transformation initiatives including RBAC, privileged access governance, least privilege enforcement, and identity lifecycle management.
• Assist in Segregation of Duties (SoD) analysis, access governance, and policy enforcement processes.
• Map cybersecurity initiatives against regulatory frameworks including DORA, NIS/NIS2, and CBI guidelines.
• Analyze cybersecurity data, risks, and trends to develop dashboards, reports, and KPI tracking.
• Document and optimize current and future-state cybersecurity processes aligned with industry best practices.
• Facilitate workshops, stakeholder discussions, and requirement walkthroughs across technical and business teams.
• Collaborate with compliance, infrastructure, SOC, and third-party teams to support cybersecurity programme delivery.

Requirements

• 8+ years of experience as a Business Analyst, preferably within cybersecurity or IT infrastructure environments.
• Strong experience supporting IAM/PAM transformation programmes.
• Good understanding of RBAC, SoD, privileged session management, identity lifecycle management, and access governance.
• Familiarity with cybersecurity frameworks and standards such as NIST, ISO 27001, and CIS Controls.
• Experience with regulatory compliance frameworks including DORA, NIS/NIS2, and CBI guidelines.
• Strong analytical and reporting skills using Excel, Power BI, Visio, or similar tools.
• Excellent stakeholder management, communication, and workshop facilitation skills.
• Experience in financial services, insurance, or regulated industries is highly preferred.