Security Business Analyst

Fruition Group; England; Remote; GBP 80,000 - 100,000; Full time

Job summary

A leading company is seeking a skilled Security Business Analyst to enhance its security framework. This remote role focuses on conducting thorough security assessments aligned with NIST CSF v2.0, addressing legacy issues, and collaborating with stakeholders to foster compliance. Join a dynamic team and contribute to improving global security posture through impactful insights and strategic remediation.

Qualifications

• Proven experience in security auditing and assessment across various technologies.
• Strong knowledge of cloud platforms and enterprise infrastructure.
• Experience conducting risk assessments and recommending mitigations.

Responsibilities

• Perform end-to-end security control assessments across various environments.
• Conduct gap analyses against the new security control framework.
• Identify outdated practices and define actionable remediation plans.

Skills

Security auditing

Gap analysis

Risk assessments

Cloud platforms

Enterprise infrastructure

SaaS environments

Compliance

Stakeholder engagement

Tools

AWS

Splunk

Crowdstrike

Kubernetes

MITRE ATT&CK

Job description

Security Business Analyst
Remote (UK-based)
Competitive daily rate, Outside IR35
6 months with chance of extension

Why Apply?
This is a unique opportunity to contribute to a large-scale uplift of security posture across a global organisation operating at enterprise scale. Following a refresh of security policies aligned to NIST CSF v2.0, the company requires a strong Security Business Analyst to carry out a broad review of systems, infrastructure, and applications. This role will focus on identifying legacy security issues, performing gap analysis, and assessing how fit-for-purpose existing security controls are under the updated standards.

Key Responsibilities

• Perform end-to-end security control assessments across infrastructure, enterprise applications, SaaS platforms, and bespoke systems.
• Review current ("as-is") environments and conduct gap analyses against the organisation's new security control framework based on NIST CSF v2.0.
• Identify weaknesses or outdated practices and define clear, actionable remediation plans in partnership with other teams.
• Dig into legacy security issues and help shape the future state of security posture.
• Work across a wide stack including AWS, GitHub Enterprise, Slack, Zoom, Atlassian, and SaaS tools like Workday, Workiva, and EquatePlus.
• Partner with internal stakeholders to ensure compliance and drive down organisational risk.

What We're Looking For

• Proven experience in security auditing and assessment across a broad range of technologies.
• Strong working knowledge of cloud platforms, enterprise infrastructure, and SaaS environments.
• Ability to dig into security controls and evaluate them against formal security frameworks.
• Experience conducting risk assessments, performing gap analysis, and recommending mitigations.
• Confident working with technical and non-technical stakeholders to influence remediation strategies.
• Desirable exposure to tools such as Splunk, Crowdstrike, AWS, Kubernetes, or MITRE ATT&CK.