Security Business Analyst

Fruition IT; United Kingdom; Remote; GBP 80,000 - 100,000; Full time

Job summary

A leading company is seeking a Security Business Analyst for a remote role aimed at enhancing security posture across its global operations. The role involves assessing legacy security issues and conducting comprehensive reviews to ensure compliance with updated security standards, engaging with various systems and stakeholders for effective remediation.

Qualifications

• Proven experience in security auditing and assessment across various technologies.
• Strong knowledge of cloud platforms and enterprise infrastructure.
• Experience in conducting risk assessments and recommending mitigations.

Responsibilities

• Perform end-to-end security control assessments across various systems.
• Conduct gap analyses against the new security control framework.
• Identify weaknesses and define actionable remediation plans.

Skills

Security auditing

Cloud platforms

Risk assessments

Gap analysis

Compliance knowledge

Tools

Splunk

Crowdstrike

AWS

Kubernetes

MITRE ATT&CK

Job description

Security Business Analyst
Remote (UK-based)
Competitive daily rate, Outside IR35
6 months with chance of extension

Why Apply?
This is a unique opportunity to contribute to a large-scale uplift of security posture across a global organisation operating at enterprise scale. Following a refresh of security policies aligned to NIST CSF v2.0, the company requires a strong Security Business Analyst to carry out a broad review of systems, infrastructure, and applications. This role will focus on identifying legacy security issues, performing gap analysis, and assessing how fit-for-purpose existing security controls are under the updated standards.

Key Responsibilities

• Perform end-to-end security control assessments across infrastructure, enterprise applications, SaaS platforms, and bespoke systems.
• Review current ("as-is") environments and conduct gap analyses against the organisation's new security control framework based on NIST CSF v2.0.
• Identify weaknesses or outdated practices and define clear, actionable remediation plans in partnership with other teams.
• Dig into legacy security issues and help shape the future state of security posture.
• Work across a wide stack including AWS, GitHub Enterprise, Slack, Zoom, Atlassian, and SaaS tools like Workday, Workiva, and EquatePlus.
• Partner with internal stakeholders to ensure compliance and drive down organisational risk.

What We're Looking For

• Proven experience in security auditing and assessment across a broad range of technologies.
• Strong working knowledge of cloud platforms, enterprise infrastructure, and SaaS environments.
• Ability to dig into security controls and evaluate them against formal security frameworks.
• Experience conducting risk assessments, performing gap analysis, and recommending mitigations.
• Confident working with technical and non-technical stakeholders to influence remediation strategies.
• Desirable exposure to tools such as Splunk, Crowdstrike, AWS, Kubernetes, or MITRE ATT&CK.