Cyber IAM Business Analyst

Bonhill Partners Ltd; Greater London; On-site; GBP 60,000 - 90,000; Full time

Job summary

Bonhill Partners Ltd is seeking an experienced Cyber IAM Business Analyst to join a strategic technology change programme focused on Identity & Access Management (IAM) within a highly regulated financial services environment.

You will lead requirements gathering, produce BRDs and functional specifications, and work with application owners and business stakeholders to assess access controls and entitlements. Strong SQL and Excel skills are required to support remediation and governance activities.

Qualifications

• Strong IAM and cybersecurity knowledge.
• Experience translating security requirements into business-friendly docs.
• Ability to analyse access controls and entitlement management.

Responsibilities

• Lead requirements gathering and produce BRDs, functional specs, and process docs.
• Assess user access, roles, permissions, and entitlements with stakeholders.
• Support IAM account remediation, access certification, and governance initiatives.
• Document access management controls including RBAC, SoD, and least privilege.
• Assist definition and implementation of IAM frameworks, policies, and controls.
• Translate complex security requirements into clear business documentation.
• Develop test strategies, plans, and cases; support UAT and testing.
• Perform data analysis using SQL and advanced Excel to investigate issues.
• Monitor progress, report status, and manage risks and dependencies.
• Collaborate with Technology, Cybersecurity, Risk, Compliance, Audit and business teams.

Skills

IAM expertise

Regulatory compliance

SQL

Advanced Excel

RBAC SoD

Stakeholder management

Job description

Focus: Identity & Access Management (IAM) | Cybersecurity | Business Analysis

We’re seeking an experienced Cyber IAM Business Analyst to join a strategic technology change programme focused on Identity & Access Management (IAM), identity governance, access remediation, and regulatory compliance within a highly regulated financial services environment.

This is an excellent opportunity for a Business Analyst with strong functional and technical IAM expertise to work closely with business application owners, Technology teams, project managers, and senior stakeholders to deliver secure, compliant, and effective access management solutions.

Key Responsibilities

• Lead requirements gathering and produce high-quality Business Requirements Documents (BRDs), Functional Specifications, and process documentation.
• Work closely with application owners and business stakeholders to assess user access, roles, permissions, and entitlements.
• Support IAM account remediation, access certification, identity governance, and role modelling initiatives.
• Analyse and document access management controls, including Least Privilege, Role-Based Access Control (RBAC), Segregation of Duties (SoD), and toxic access combinations.
• Support the definition, assessment, and implementation of IAM frameworks, policies, procedures, and control improvements.
• Translate complex technical and security requirements into clear, business-friendly documentation and actionable recommendations.
• Develop test strategies, test plans, and test cases; support system and integration testing, User Acceptance Testing (UAT), and test result reporting.
• Perform data analysis using SQL and advanced Excel to investigate access-related issues, validate findings, and support evidence-based remediation.
• Monitor project progress, prepare status reports, and proactively manage risks, issues, dependencies, and stakeholder expectations.
• Collaborate with Technology, Cybersecurity, Risk, Compliance, Audit, and business teams to ensure successful delivery.
• Strong Business Analysis experience within IAM, cybersecurity, access management, or technology transformation programmes.
• Deep understanding of IAM processes, identity governance, account remediation, access reviews, and entitlement management.
• Proven experience with application role and permission analysis, RBAC, Least Privilege, and Segregation of Duties.
• Experience defining, assessing, and implementing IAM frameworks, processes, procedures, and controls.
• Strong stakeholder management, workshop facilitation, communication, and documentation skills.
• Hands-on SQL and advanced Excel capabilities, with the ability to investigate complex data and provide evidence-based recommendations.
• Experience supporting testing activities, UAT, issue resolution, and delivery across the project lifecycle.
• Ability to manage competing priorities across multiple workstreams in a changing environment.