Cyber Security & Compliance BA — Hybrid, 6-Month Contract

SCC; Manchester; Hybrid; GBP 74,000 - 92,000; Full time

Job summary

SCC is seeking an experienced Business Analyst to support cyber security and regulatory compliance initiatives within a Critical National Infrastructure environment in Manchester. The role focuses on gathering requirements, facilitating security and governance workshops, and producing artefacts to drive compliant change across security programs.

Ideal candidates will have strong experience in cyber security, regulatory environments, and experience with ISO 27001, NIST, or similar frameworks,

Qualifications

• Proven experience as a Business Analyst in cyber security, compliance, risk, or technology programmes.
• Strong requirements gathering and stakeholder management skills.
• Experience producing business analysis artefacts and process documentation.
• Knowledge of cyber security frameworks and regulatory environments.
• Familiarity with Agile and Waterfall delivery methodologies.

Responsibilities

• Gather, analyse, and document business and technical requirements.
• Facilitate workshops with security, risk, compliance, and business stakeholders.
• Produce process maps, user stories, and requirements documentation.
• Support regulatory and governance-driven projects from discovery through delivery.
• Ensure requirements traceability and alignment to business objectives.

Skills

Requirements gathering

Stakeholder management

Regulatory compliance

Cyber security

Process mapping

User stories

Communication skills

ISO 27001 / NIST familiarity

Agile & Waterfall

Job description

SCC is seeking an experienced Business Analyst to support cyber security and regulatory compliance initiatives within a Critical National Infrastructure environment in Manchester. The role focuses on gathering requirements, facilitating security and governance workshops, and producing artefacts to drive compliant change across security programs.

Ideal candidates will have strong experience in cyber security, regulatory environments, and experience with ISO 27001, NIST, or similar frameworks,