Cyber BA

Cyber UK; United Kingdom; À distance; GBP 55 000 - 85 000; Plein temps

Résumé du poste

Cyber UK is seeking an experienced Business Analyst specializing in Identity and Access Management for our financial services clients. You will gather requirements, draft BRD and functional specs, and shape IAM frameworks across project lifecycles.

Responsibilities include formulating testing approaches, supporting UAT, and translating complex technical data into business language while maintaining strong stakeholder engagement with regulators and partners.

Qualifications

• IAM knowledge with strong functional and technical IAM experience.
• Experience in framework development and deployment.
• Familiar with regulatory guidance around access management (EBA-ICT, NIST, COBIT, FCA).
• Strong business analysis experience in security or technology change programs.
• Experience documenting roles and permissions with business owners.
• Understanding of RBAC, least privilege, SoD and entitlements.
• Translate complex technical information into business language.
• Excellent communication and stakeholder management.
• Experience in regulated financial services environments.
• Familiarity with identity governance and access management concepts.

Responsabilités

• Gather requirements and draft Business Requirements and Functional Specifications.
• Lead solution proposals and illustrative calculations from production data.
• Formulate testing approaches and compile test plans and test cases.
• Perform system/integration testing and support UAT.
• Compile and present test results; complete status reports; escalate issues.
• Advise on TEC solutions and vendor landscape; partner with business.
• Strong analytical skills to support issue resolution with evidence.
• Excellent communication with stakeholders for delivery success.
• Perform SQL queries and advanced Excel to support analysis.

Connaissances

IAM domain expertise

Regulatory knowledge

Business analysis

Stakeholder management

SQL queries

Excel advanced

Solution design

RBAC / access control

Requirements documentation

Financial services experience

Outils

RSA IGL

Description du poste

Project description

Our client is looking for an experienced cyber and access management professional to join part of their team.

Responsibilities

• Performing requirements gathering and compiling formal Business Requirements and Functional Specification documents.
• Covering all aspects of Business Analyst engagement throughout the Project Development lifecycle including but not limited to: o Formulating and presenting proposed solutions to the business users. This may incorporate illustrative calculations using production data. o Formulating testing approaches and compiling test plans and test cases. o Performing system/integration testing and supporting business users with user acceptance testing. o Compiling and presenting test results. o Completing project/work-stream status reports. o Escalating issues/risks to project/line management.
• Supporting both Project Managers and business partners through SME and problem skills. Acting as an advisor on appropriate TEC solutions with a solid understanding of the vendor landscape.
• Strong analytical skills with the ability to support understanding and resolution of issues with evidence based findings.
• Excellent communication skills with a focus on stakeholder management for ensuring delivery success across the Change portfolio but also acting as a representative and key partner for the business for TEC in a wider capacity.
• Strong TEC skills with the ability to perform sql queries, and be self-reliant on systems analysis. Advanced excel also required.

SKILLS Must have

• Project has a strong focus on Identity access management so the BA will need to have very strong functional and technical knowledge of the IAM processes. Deep understanding of IAM domain, Account remediation.
• Experience of framework development and deployment
• Understanding of key regulatory and other framework guidance around access management (e.g. EBA-ICT, FFIEC, NIST, COBIT, FCA etc.) Essential
• Strong business analysis experience, ideally in security, access management, or technology change programmes.
• Experience working with business application owners to understand and document roles and permissions
• Understanding of IAM concepts including least privilege, SoD, toxic combinations, role based access control (RBAC), and entitlements.
• Ability to translate complex technical and access related information into business friendly language.
• Excellent communication, facilitation, and stakeholder management skills.
• Strong analytical and problem solving capabilities with attention to detail. Desirable
• Experience within financial services or highly regulated environments.
• Familiarity with RSA IGL and access certification processes.
• Knowledge of operational risk, internal controls, and audit requirements.
• Experience supporting role modelling or access remediation activities.
• Identity & Access Management experience with business analysis or technical/functional design and implementation experience in a financial services environment
• Definition, assessment, and governance of process, procedures, and controls for identity and access management
• Delivering IAM to meet compliance requirements
• Proven experience on Identity Governance, and Segregation of Duties
• A detailed and proven understanding of access management within highly complex environments.
• Proven understanding of current best practice approach to security assurance and the application of security frameworks
• Planning and prioritizing multiple work streams in response to rapidly developing and changing portfolios
• Experience with business analysis, solution design in other cybersecurity domains

Nice to have

• Conduct themselves in a manner commensurate with company values Lead by example in building relationships across the bank, establishing a strong peer network and helping to strengthen collaboration. Leading by example by being a consistent role model on supporting and enforcing company policies around office attendance, office arrival times and sitting with the BA team to ensure collaboratively working with the team. Being flexible around the days in the office depending on business needs. Excellent communication skills required both written and verbal. Ability to build positive collaborative working relationships with Technology, Change Managers and Business stakeholders. A continuous improvement mind set and proactive attitude to process improvements and using new technology. Maintain and enhance good working relationships with stakeholders, across the region and globally to share best practices, provide support and develop effective local policies and procedures appropriate to the Company