Business Analyst (Cyber Security)

Harvey Nash Group; Reading; Hybrid; GBP 66,000 - 111,000; Part time

Job summary

Harvey Nash Group is seeking an experienced Business Analyst to support a major cyber security improvement programme in Reading with hybrid working. The role is an initial 6-month contract inside IR35, paying up to £600 per day.

You will gather and document requirements, facilitate workshops, create process maps, and support IAM, logging and monitoring, risk remediation and compliance initiatives across cyber security and business teams.

Qualifications

• Proven BA experience in cyber security, technology or regulatory change programmes.
• Experience supporting large cyber initiatives including IAM, logging and monitoring, security operations, risk and compliance.
• Strong requirements gathering, process analysis and documentation skills.
• Ability to translate complex technical concepts into clear business documentation.

Responsibilities

• Gather, analyse and document business and technical requirements across multi-workstreams.
• Facilitate workshops and stakeholder sessions to capture requirements and define solutions.
• Create and maintain process maps, swim lane diagrams and future-state operating models.
• Support cyber security initiatives including IAM, logging & monitoring, risk remediation and compliance.
• Identify gaps, risks and opportunities for improvement in current-state processes and controls.
• Produce business requirements, user stories and governance artefacts.
• Support development of cyber improvement roadmaps and action plans.
• Track dependencies, risks, decisions and delivery outcomes.

Skills

Cyber security

Business analysis

Stakeholder engagement

Requirements gathering

Process mapping

Workshop facilitation

Job description

Business Analyst (Cyber Security)

Reading (Hybrid Working)

Up to £600 p/d Initial 6 Month Contract (Inside IR35)

We are seeking an experienced Business Analyst to support a major cyber security improvement programme within a complex and highly regulated environment. This role will play a key part in delivering critical security initiatives, working closely with cyber teams, technical specialists and business stakeholders to improve processes, controls and compliance across the organisation.

The successful candidate will have a strong track record of supporting and delivering cyber security programmes, particularly within areas such as Identity & Access Management (IAM), Logging & Monitoring, security controls, governance and compliance.

Key Responsibilities

• Gather, analyse and document business and technical requirements across multiple workstreams.


• Facilitate workshops and stakeholder engagement sessions to capture requirements and define solutions.


• Create and maintain process maps, swim lane diagrams, workflows and future-state operating models.


• Support cyber security initiatives including IAM, logging and monitoring, risk remediation and compliance programmes.


• Assess current-state processes and controls, identifying gaps, risks and opportunities for improvement.


• Produce clear business requirements, user stories, functional documentation and governance artefacts.


• Support the development of cyber improvement roadmaps and action plans.


• Track dependencies, risks, decisions and delivery outcomes.


• Coordinate activities across cyber security, technology and business teams.


• Produce status reports, management information and governance updates for programme stakeholders.

Required Experience

• Proven experience as a Business Analyst within cyber security, technology or regulatory change programmes.


• Experience supporting large-scale cyber initiatives, including IAM, Logging & Monitoring, Security Operations, Risk & Compliance or related security workstreams.


• Strong requirements gathering, business process analysis and documentation skills.


• Demonstrable experience creating process flows, swim lane diagrams and end-to-end business process mapping.


• Ability to translate complex technical concepts into clear business-focused documentation.


• Experience facilitating workshops and managing stakeholders at all levels.


• Strong analytical, organisational and problem‑solving skills.


• Experience working within complex enterprise or regulated environments.