Lead Business Analyst/BA-Cybersecurity Domain

Reserve Bank Information Technology; Navi Mumbai; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

Reserve Bank Information Technology in Navi Mumbai seeks an experienced Business Analyst to lead cybersecurity initiatives, translating complex security needs into actionable requirements and shaping robust controls across IAM, SOC, SIEM, and data protection.

You will partner with SOC analysts and incident responders to map workflows, assess risks, and drive compliance with NIST CSF, ISO 27001, and RBI guidelines. Strong stakeholder engagement and documentation are essential.

Qualifications

• 7+ years of experience as Business Analyst in cybersecurity or a related field.
• Strong understanding of cybersecurity domains: IAM, SOC, SIEM, SOAR, DLP, GRC, Application, Network and cloud security.
• Strong understanding of cybersecurity principles, technologies, and regulations.
• Familiarity with cybersecurity frameworks and standards (e.g., NIST, CIS, ISO 27001)
• Excellent analytical and problem‑solving skills
• Strong communication and interpersonal skills
• Experience with project management methodologies (e.g., Agile, Waterfall)
• Expertise in business process modeling tools (e.g., BPMN, Visio) and requirements management platforms (e.g., JIRA, Confluence).
• Exceptional communication, stakeholder management, and leadership skills.

Responsibilities

• Lead comprehensive business analysis for cybersecurity initiatives, including SOC modernization, threat management, vulnerability management, IAM, data protection, and compliance.
• Collaborate directly with SOC analysts, threat hunters, and incident responders to understand operational workflows, log ingestion pipelines, alert triage, and escalation protocols.
• Translate SOC use cases into business requirements, covering threat detection, correlation rules, playbook automation, and SIEM tuning (e.g., QRadar, Splunk).
• Conduct threat modeling and risk assessments, aligning mitigation strategies with RBI cybersecurity guidelines, NIST CSF, ISO 27001, and MITRE ATT&CK.
• Analyze and optimize cybersecurity processes, identify gaps in detection coverage, response time, and tool interoperability across SOC platforms.
• Lead security-related projects, managing scope, timelines, and stakeholder expectations across cross‑functional teams
• Drive integration of cybersecurity tools such as SOAR, SIEM, EDR, IAM, and PAM with enterprise systems, ensuring seamless data flow and actionable intelligence.
• Aware of emerging threats, APT tactics, and regulatory changes, advising leadership on strategic adjustments to security posture and investment priorities.
• Create and maintain detailed documentation, including process flows, business requirement document, use cases, traceability matrices, and control mappings
• Collaborate on the design and implementation of security controls, ensuring they meet both business objectives and technical feasibility.
• Facilitate workshops, tabletop exercises, and post‑incident reviews, translating findings into process improvements and updated documentation.
• Support secure SDLC and DevSecOps practices, embedding security requirements into CI/CD pipelines and Agile delivery frameworks.
• Mentor junior analysts and BAs, fostering cybersecurity literacy, analytical rigor, and stakeholder engagement excellence.
• Act as a liaison between business units and cybersecurity teams, ensuring clarity, alignment, and accountability in all security initiatives.

Skills

Cybersecurity

IAM

SOC

SIEM

SOAR

DLP

GRC

Regulatory compliance

Stakeholder management

Project management

BPMN

Visio

JIRA

Confluence

Threat modeling

Education

CBAP (Certified Business Analysis Professional)

Agile or Scrum certifications (CSPO, SAFe, Six Sigma)

CompTIA Security+ / CEH / CISSP

Tools

JIRA

Confluence

Visio

BPMN

Job description

• 7+ years of experience as Business Analyst in cybersecurity or a related field
• Strong understanding of cybersecurity domains: IAM, SOC, SIEM, SOAR, DLP, GRC, Application, Network and cloud security.
• Strong understanding of cybersecurity principles, technologies, and regulations.
• Familiarity with cybersecurity frameworks and standards (e.g., NIST, CIS, ISO 27001)
• Excellent analytical and problem‑solving skills
• Strong communication and interpersonal skills
• Experience with project management methodologies (e.g., Agile, Waterfall)
• Expertise in business process modeling tools (e.g., BPMN, Visio) and requirements management platforms (e.g., JIRA, Confluence).
• Exceptional communication, stakeholder management, and leadership skills.

• Lead comprehensive business analysis for cybersecurity initiatives, including SOC modernization, threat management, vulnerability management, IAM, data protection, and compliance.
• Collaborate directly with SOC analysts, threat hunters, and incident responders to understand operational workflows, log ingestion pipelines, alert triage, and escalation protocols.
• Translate SOC use cases into business requirements, covering threat detection, correlation rules, playbook automation, and SIEM tuning (e.g., QRadar, Splunk).
• Conduct threat modeling and risk assessments, aligning mitigation strategies with RBI cybersecurity guidelines, NIST CSF, ISO 27001, and MITRE ATT&CK.
• Analyze and optimize cybersecurity processes, identify gaps in detection coverage, response time, and tool interoperability across SOC platforms.
• Lead security-related projects, managing scope, timelines, and stakeholder expectations across cross‑functional teams
• Drive integration of cybersecurity tools such as SOAR, SIEM, EDR, IAM, and PAM with enterprise systems, ensuring seamless data flow and actionable intelligence.
• Aware of emerging threats, APT tactics, and regulatory changes, advising leadership on strategic adjustments to security posture and investment priorities.
• Create and maintain detailed documentation, including process flows, business requirement document, use cases, traceability matrices, and control mappings
• Collaborate on the design and implementation of security controls, ensuring they meet both business objectives and technical feasibility.
• Facilitate workshops, tabletop exercises, and post‑incident reviews, translating findings into process improvements and updated documentation.
• Support secure SDLC and DevSecOps practices, embedding security requirements into CI/CD pipelines and Agile delivery frameworks.
• Mentor junior analysts and BAs, fostering cybersecurity literacy, analytical rigor, and stakeholder engagement excellence.
• Act as a liaison between business units and cybersecurity teams, ensuring clarity, alignment, and accountability in all security initiatives.

• CBAP (Certified Business Analysis Professional)
• Agile or Scrum certifications (CSPO, SAFe, Six Sigma)
• CompTIA Security/ CEH / CISSP
• Experience with cybersecurity tools and technologies (e.g., SIEM, IDS/IPS, firewalls)
• Knowledge of Data Science concepts