Security Business Analyst

Elysium Healthcare; Borehamwood; On-site; GBP 40,000 - 60,000; Full time

Job summary

Join Elysium Healthcare as a Security Business Analyst, where you will play a pivotal role in the management of cyber security projects. You will act as a key liaison between IT governance and business stakeholders, ensuring that security requirements are met effectively through thorough documentation and coordination. This role offers a competitive salary and a vibrant work environment within a leading healthcare organization.

Benefits

33 days annual leave pro rata

Free meals and parking

Wellbeing support

24 hour GP service

Career development

Pension contribution

Life Assurance

Enhanced Maternity Package

Qualifications

• Experience in Business Analysis specifically on security or compliance projects.
• Strong communication and stakeholder management abilities.
• Ability to manage documentation and requirements for complex projects.

Responsibilities

• Lead the documentation of cyber security and compliance requirements.
• Coordinate with stakeholders to ensure alignment on project scope and expectations.
• Maintain audit-ready documentation and reporting.

Skills

Business Analysis

Stakeholder Management

Process Modelling

Attention to Detail

Gap Analysis

Risk Management

Compliance Understanding

Job description

Do you have experience working as a Business Analyst on security, infrastructure or compliance related projects? If so, join Elysium Healthcare as the Security Business Analyst.

As the Security Business Analyst, you will support the structured planning, coordination, and delivery of cyber security initiatives across the organisation. Working as a central link between security governance, IT delivery, and business stakeholders, you will ensure that security requirements are clearly defined, scoped, and delivered in a traceable, auditable way.

You will play a vital role in translating risk, regulatory, and technical requirements into actionable delivery documentation. This includes supporting internal improvement programmes (e.g. PAM, MFA, hardening) and external partner-led projects. You will act as a central coordination point across multiple stakeholders — ensuring security expectations are consistently embedded into project outcomes.

In addition to delivery support, the role contributes to project governance packs, assurance reporting, stakeholder engagement, and ongoing documentation of risk treatments or security decisions. You will help maintain delivery continuity and control alignment across change activities.

As a Security Business Analyst, you will be:

• Leading the capture and documentation of cyber security and compliance requirements
• Translating regulatory and risk drivers into clear scope statements and delivery artefacts
• Producing and maintaining project documentation (e.g. RAID logs, traceability matrices, solution briefs)
• Coordinating across internal teams and external delivery partners to align expectations and scope
• Tracking delivery of security requirements through to implementation and ensure traceability to business and risk objectives
• Contributing to project governance reporting, stakeholder packs, and audit-ready evidence
• Maintaining delivery continuity across multiple projects or vendors through structured handovers and knowledge transfer
• Supporting alignment with control frameworks (e.g. NIST CSF, DSPT, CE+, ISO 27001)

To be successful in this role, you will have:

• Experience working as a Business Analyst on security, infrastructure, or compliance-related projects
• Demonstrated ability to structure and trace complex requirements through to delivery
• Experience managing delivery dependencies and documentation across multiple stakeholders or vendors
• Exposure to risk-driven and audit-sensitive project environments
• (Desirable) Experience supporting NHS DSPT, CE+, or ISO 27001 projects
• (Desirable) Experience with delivery involving external suppliers, system integrators, or managed services
• Strong knowledge of business analysis techniques (e.g. process modelling, gap analysis, stakeholder mapping)
• Ability to translate risk, compliance, and technical requirements into structured documentation
• Familiarity with project governance artefacts such as business cases, RAID logs, traceability matrices, and solution design packs
• Understanding of cyber security control frameworks (e.g. NIST CSF, ISO 27001, DSPT, CE+)
• Skilled in managing requirements across waterfall, agile, or hybrid delivery model
• Strong stakeholder management, communication, and facilitation skills
• High attention to detail when producing audit-ready documentation
• (Desirable) Familiarity with tooling such as PAM, MFA, EDR, or vulnerability management from a process or requirements perspective

What you will get:

• A competitive annual salary
• The equivalent of 33 days annual leave Pro Rata (inc Bank Holidays) – plus your birthday off!
• Free meals and parking
• Wellbeing support and activities to help you maintain a great work-life balance.
• 24 hour GP Service to ensure you are the best you can be
• Career development and trainingto help youachieve your career goals.
• Pension contribution to secure your future.
• Life Assurance for added peace of mind.
• Enhanced Maternity Packageso you can truly enjoy this special time.

There is also a range of other benefits including retail discounts, special offers and much more.

About your next employer:

You will be working for an established, stable and agile company with over 8,000 employees and a unique approach to the delivery of care. With a network of over 90 services across England and Wales covering Mental Health, Neurological, Learning Disabilities & Autism, Children & Education, there is opportunity for you to grow and move.

Elysium Healthcare is part of Ramsay Health Care with a global network that extends across 10 countries and employs over 86,000 people globally.

Elysium Healthcare follows safer recruitment of staff for all appointments and is a Disability Confident employer, committed to inclusive and accessible recruitment. It is a requirement that all staff understand it is each person’s individual responsibility to promote and safeguard the welfare of service users. All candidates will be subject to a DBS disclosure.

Expected Salary (this is not sent to the employer)

Postcode

(optional) I am a diversity candidate. I am BAME or from a disadvantaged background or over 55 years old or Non-Binary or Disabled or Non-Heterosexual etc.
* We do not send this information with job applications.
What is BAME? |Why do we ask?

By clicking Submit I agree to applications or registrations on 3rd party sites being made for me and I agree to these Terms of Use .