Security Improvement Business Analyst

Experis UK; Gourock; On-site; GBP 55,000 - 75,000; Full time

Job summary

Experis UK is seeking a Security Improvement Business Analyst for our client based in Greater Glasgow for an initial 9-month assignment, inside IR35. You will work across Security, IT, HR, and governance to translate audit findings and cybersecurity risks into actionable requirements; collaborating with stakeholders, security SMEs and external partners to ensure clear, traceable cybersecurity controls.

This role requires proactive, organised delivery and excellent stakeholder management in a

Qualifications

• Knowledge of cybersecurity domains: asset management, IAM, incident response.
• Experience with NIST CSF or ISO 27001.
• Able to work in fast-paced multi-workstream transformation.
• Proactive, collaborative with quality documentation.

Responsibilities

• Collaborate with Security Improvement Project Manager to plan analysis activities.
• Elicit, document and validate cybersecurity, IT, and operational requirements.
• Translate risks and requirements into structured artefacts.
• Bridge between stakeholders, IT, security SMEs and external partners.

Skills

Cybersecurity knowledge

NIST/ISO27001 familiarity

Stakeholder collaboration

Requirements elicitation

Job description

Our Client based in Greater Glasgow are looking for a Security Improvement Business Analyst to join their team, for an initial 9 months working Inside IR35.

Within this role, you will be working across all layers of the business - Seupport Services, IT, HR Supply Chain, Standards & Performance - translating audit findings, cybersecurity risks and SIP Recommendations into details actionable requirements. The role involves deep collaboration with internal stakeholders, specialist security SME's, external Consultancy Partners and governance teams to ensure clarity, traceability and consistency of cybersecurity processes and controls.

• Collaborate with Security Improvement Project Manager to plan, prioritise and schedule business analysis activities
• Elicit, document and validate cybersecurity, IT, and operational requirements through workshops, interviews, process reviews and assessment of existing security controls and practices.
• Translate complex cybersecurity risks, audit findings, and technical requirements into clear, structured artefacts
• Act as a bridge between Business Stakeholders, IT Teams, Security SMEs and external consultancy partners - ensure alignment with NIST Cybersecurity Framework Outcomes

Qualifications, Skills and Experience

• Strong Understanding of Cybersecurity domains such as Asset Management, identity and access management, incident response, network security, data protection, vulnerability management, and third-party security.
• Experience working with recognised security frameworks (e.g. NIST Cybersecurity Framework, ISO 27001)
• Comfortable working in a fast-paced, multi-workstream transformation project with evolving priorities and dependencies
• Proactive, self-motivated, and collaborative, with a commitment to high-quality documentation, clarity and structured delivery.

If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website.