Business Analyst Contractor

CFC; London; On-site; GBP 100,000 - 125,000; Full time

Job summary

An established industry player is seeking a detail-oriented Business Analyst Contractor to enhance their technology function. This role involves collaborating with stakeholders to drive security and access control initiatives, focusing on Role-Based Access Control, Identity and Access Management, and Data Loss Prevention. The successful candidate will engage with both business and IT teams to ensure compliance and effective implementation of security solutions. Join a vibrant team that values passion, challenges the status quo, and creates a fun working environment while making a significant impact in the insurance sector.

Qualifications

• Strong understanding of PAM and DLP concepts, specifically in Azure environments.
• Exceptional communication skills to engage with senior stakeholders.

Responsibilities

• Collaborate with stakeholders to document business and technical requirements.
• Define business processes for effective implementation of access management solutions.

Skills

Role-Based Access Control (RBAC)

Identity and Access Management (IAM)

Data Loss Prevention (DLP)

Communication Skills

Tools

Microsoft Entra ID (Azure AD)

Azure Privileged Identity Management (PIM)

Azure RBAC

Microsoft Purview DLP

Job description

Business Analyst Contractor

Department: DevOps & Infrastructure

Employment Type: Temporary

Location: London

Reporting To: Paul Wilford

Description

Technology is a key differentiator to the CFC business. After investing heavily during the last couple of years to build our technology function, we now need to look at driving greater efficiency and a faster delivery of value.

We are seeking a skilled and detail-oriented Business Analyst with a strong technology background and previous experience in Role-Based Access Control (RBAC), Identity and Access Management (IAM) and Data Loss Prevention (DLP) implementations. The successful candidate will work closely with stakeholders across Business and IT teams to analyse, document, and drive the successful delivery of security and access control initiatives.

About the role

Within this role, you will be expected to contribute in week one, and you will have experience within the following tasks:

1. Collaborate with stakeholders to elicit, document and validate business and technical requirements related to RBAC (Role Based Access Controls), PAM (Privileged Access Management), and DLP (Data Loss Prevention) initiatives.
2. Define and document business processes to ensure effective implementation of access management and security solutions.
3. Work with stakeholders across the business to identify and map sensitive data within the organisation to support DLP strategies and compliance, along with identifying data owners.
4. Organise and facilitate business engagement activities and workshops to gather insights, validate requirements and drive consensus.
5. Identify key stakeholders and actively engage them throughout the initiatives lifecycle to align security initiatives with business needs.
6. Maintain clear tracking of business and technical requirements to ensure alignment with project goals.
7. Work closely with IT teams to ensure that solutions meet business and compliance requirements.
8. Develop detailed role, access, process, and service definitions along with business process flows and use cases to support the implementation of Azure-based access management and security controls.
9. Establish clear guidelines for service design, implementation and operational processes related to security and access management.
10. Support User Acceptance Testing (UAT), develop test cases and validate system functionalities.
11. Define KPIs and reporting frameworks to track progress and effectiveness of access control and data protection initiatives.
12. Develop training materials and conduct sessions on implemented Azure security and access control solutions.

About you

You will have a strong understanding of PAM and DLP concepts, solutions, and tools specifically in Azure environments including the following:

• Microsoft Entra ID (Azure AD)
• Azure Privileged Identity Management (PIM)
• Azure RBAC
• Microsoft Purview DLP

You will have exceptional communication skills with the ability to engage with senior stakeholders across the business and the ability to deal with them in a professional manner.

Core Values

Love what you do:
We show up each day ready to take on the world. Our passion and intensity set us apart and makes the difference to our colleagues, customers, brokers and carriers.

Challenge everything:
We're never afraid to question the way that things are done and we constantly challenge ourselves and others to make things better.

Have fun, be good:
Insurance is a serious business, but we don't take ourselves too seriously. We make it fun to work at CFC, we welcome all viewpoints, and we treat everyone how we would expect to be treated.