Cyber Security Business Analyst — IAM & Compliance

Harvey Nash Group; Reading; Hybrid; GBP 66,000 - 111,000; Part time

Job summary

Harvey Nash Group is seeking an experienced Business Analyst to support a major cyber security improvement programme in Reading with hybrid working. The role is an initial 6-month contract inside IR35, paying up to £600 per day.

You will gather and document requirements, facilitate workshops, create process maps, and support IAM, logging and monitoring, risk remediation and compliance initiatives across cyber security and business teams.

Qualifications

• Proven BA experience in cyber security, technology or regulatory change programmes.
• Experience supporting large cyber initiatives including IAM, logging and monitoring, security operations, risk and compliance.
• Strong requirements gathering, process analysis and documentation skills.
• Ability to translate complex technical concepts into clear business documentation.

Responsibilities

• Gather, analyse and document business and technical requirements across multi-workstreams.
• Facilitate workshops and stakeholder sessions to capture requirements and define solutions.
• Create and maintain process maps, swim lane diagrams and future-state operating models.
• Support cyber security initiatives including IAM, logging & monitoring, risk remediation and compliance.
• Identify gaps, risks and opportunities for improvement in current-state processes and controls.
• Produce business requirements, user stories and governance artefacts.
• Support development of cyber improvement roadmaps and action plans.
• Track dependencies, risks, decisions and delivery outcomes.

Skills

Cyber security

Business analysis

Stakeholder engagement

Requirements gathering

Process mapping

Workshop facilitation

Job description

Harvey Nash Group is seeking an experienced Business Analyst to support a major cyber security improvement programme in Reading with hybrid working. The role is an initial 6-month contract inside IR35, paying up to £600 per day.

You will gather and document requirements, facilitate workshops, create process maps, and support IAM, logging and monitoring, risk remediation and compliance initiatives across cyber security and business teams.