Security Business Analyst

JR United Kingdom; England; Remote; GBP 80,000 - 100,000; Full time

Job summary

A leading company in the UK is seeking a Security Business Analyst for a remote position focused on enhancing security posture. This role entails conducting security assessments, managing remediation plans, and working with both technical and non-technical stakeholders to ensure compliance with updated standards. Applicants should possess strong experience in security auditing, risk assessments, and familiarity with cloud platforms and SaaS environments.

Qualifications

• Proven experience in security auditing and assessment across broad technologies.
• Strong knowledge of cloud platforms, enterprise infrastructure, and SaaS environments.
• Experience conducting risk assessments and recommending mitigations.

Responsibilities

• Perform end-to-end security control assessments across various environments.
• Conduct gap analyses against the organization’s new security control framework.
• Partner with internal stakeholders to ensure compliance and reduce risk.

Skills

Security auditing

Cloud platforms

Risk assessments

Gap analysis

Stakeholder management

Tools

Splunk

Crowdstrike

AWS

Kubernetes

MITRE ATT&CK

Job description

Social network you want to login/join with:

Security Business Analyst
Remote (UK-based)
Competitive daily rate, Outside IR35
6 months with chance of extension

Why Apply?
This is a unique opportunity to contribute to a large-scale uplift of security posture across a global organisation operating at enterprise scale. Following a refresh of security policies aligned to NIST CSF v2.0, the company requires a strong Security Business Analyst to carry out a broad review of systems, infrastructure, and applications. This role will focus on identifying legacy security issues, performing gap analysis, and assessing how fit-for-purpose existing security controls are under the updated standards.

Key Responsibilities

• Perform end-to-end security control assessments across infrastructure, enterprise applications, SaaS platforms, and bespoke systems.
• Review current ("as-is") environments and conduct gap analyses against the organisation's new security control framework based on NIST CSF v2.0.
• Identify weaknesses or outdated practices and define clear, actionable remediation plans in partnership with other teams.
• Dig into legacy security issues and help shape the future state of security posture.
• Work across a wide stack including AWS, GitHub Enterprise, Slack, Zoom, Atlassian, and SaaS tools like Workday, Workiva, and EquatePlus.
• Partner with internal stakeholders to ensure compliance and drive down organisational risk.

What We're Looking For

• Proven experience in security auditing and assessment across a broad range of technologies.
• Strong working knowledge of cloud platforms, enterprise infrastructure, and SaaS environments.
• Ability to dig into security controls and evaluate them against formal security frameworks.
• Experience conducting risk assessments, performing gap analysis, and recommending mitigations.
• Confident working with technical and non-technical stakeholders to influence remediation strategies.
• Desirable exposure to tools such as Splunk, Crowdstrike, AWS, Kubernetes, or MITRE ATT&CK.