Senior Cyber Security & AI Transformation Analyst

Xpand Group; Greater London; Hybrid; GBP 111,000 - 148,000; Full time

Job summary

Xpand Group is seeking a Senior Cyber Security Business Analyst to join a major financial services transformation focused on cyber security and AI integration. You will shape AS-IS/TO-BE models, governance, and TOMs while translating complex security requirements into actionable delivery artifacts.

You will collaborate with CISO teams and stakeholders across Technology, Data & AI, and Risk to ensure effective design, delivery and embedding of new capabilities into BAU operations.

Qualifications

• 7+ years in a Senior BA, Cybersecurity BA or Security Transformation role.
• Experience delivering complex technology or cybersecurity transformation programmes.
• Expertise in BPMN process modelling, AS-IS/TO-BE analysis and process optimisation.
• Experience designing or implementing Target Operating Models (TOMs).
• Strong requirements engineering, stakeholder management and workshop facilitation.
• Translating security, risk or regulatory requirements into delivery artefacts.
• Knowledge of cybersecurity governance, controls and risk management.
• Maintaining traceability between requirements, controls and delivery.
• Familiarity with Agile, SDLC and enterprise technology delivery.
• Experience in financial services or regulated environments.

Responsibilities

• Lead requirements gathering and analysis across cybersecurity and AI transformation initiatives.
• Translate objectives, security risks and regulatory requirements into functional specs.
• Develop detailed business requirements, user stories, acceptance criteria, and delivery documentation.
• Identify gaps, dependencies and opportunities for improvement across security processes.
• Maintain end-to-end requirements traceability through the project lifecycle.
• Analyse existing cybersecurity processes and develop AS-IS/TO-BE operating models.
• Define workflows, governance structures, controls and handovers.
• Support TOM design for AI-enabled cybersecurity capabilities.
• Identify automation opportunities and improve operational efficiency.
• Contribute to vendor assessments, RFIs/RFPs and technology evaluations.
• Translate security requirements into practical operational processes with cybersecurity teams.
• Support offensive security, vulnerability management, app security and AI-assisted testing.
• Ensure regulatory considerations and risk-based prioritisation are applied.
• Facilitate workshops, challenge requirements and translate discussions into decisions.
• Collaborate with architects, security specialists, developers and delivery teams.
• Support Agile delivery through backlog refinement and acceptance testing.
• Produce executive presentations, process documentation and governance reporting.
• Assist operational readiness and transition to BAU services.

Skills

7+ years experience

BPMN process modelling

AS-IS/TO-BE analysis

Target Operating Models

Requirements engineering

Stakeholder management

Agile SDLC

Security governance

Vulnerability management

Tools

Azure DevOps

ServiceNow

Integrated Risk Management (IRM)

Job description

Xpand Group is seeking a Senior Cyber Security Business Analyst to join a major financial services transformation focused on cyber security and AI integration. You will shape AS-IS/TO-BE models, governance, and TOMs while translating complex security requirements into actionable delivery artifacts.

You will collaborate with CISO teams and stakeholders across Technology, Data & AI, and Risk to ensure effective design, delivery and embedding of new capabilities into BAU operations.