Senior Information Security Business Analyst

Ernst & Young Advisory Services Sdn Bhd; Ernakulam; On-site; INR 1,200,000 - 2,200,000; Full time

Job summary

EY is seeking a Senior Information Security Business Analyst to join our Enterprise Security Program. You will ensure business and security requirements are captured, documented, communicated, and managed across complex initiatives with stakeholders and Information Security Services.

You will drive process improvement, work with diverse teams across geographies, and provide actionable insights to enable risk-aware decision making and robust security outcomes.

Qualifications

• 8–10 years’ experience in business analysis within information security.
• Strong ability to document and review security requirements.
• Certifications such as CISSP, CISM or CBAP are desirable.
• Proficient in security technologies across cloud, network, perimeter, messaging, endpoints, and data security.

Responsibilities

• Elicit, analyze, document and manage business and security requirements for complex Enterprise Security Program projects.
• Collaborate with business, security, technical and project management stakeholders to ensure clear and feasible requirements.
• Partner with Security QA staff to validate and test solutions against documented requirements.
• Trace requirements to code, policy, and test cases to ensure traceability.
• Contribute to continuous improvement of BA processes and tools within security domain.
• Share knowledge and best practices to support team effectiveness.

Skills

Identity and Access Management

Requirements gathering

Stakeholder engagement

Security domain knowledge

Business analysis methodologies

English communication

Job description

Senior Information Security Business Analyst

Other locations: Primary Location Only

Date: Sep 23, 2026

Requisition ID: 1735907

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Senior Information Security Business Analyst

InfoSec provides reliable, secure, and resilient technology services and solutions to support over 300,000 EY people.

Information Security takes a proactive approach to protecting EY’s brand through robust technical security controls, a clearly defined security strategy and ongoing compliance and incident management programs designed to detect and protect against increasingly sophisticated threats against the organization.

You will work with technologists and business specialists to meet the increasing pace of our business. That means more growth for you, exciting learning opportunities, career choices, and the chance to make a real impact.

The opportunity

The Senior Security Business Analyst role within the Enterprise Security Program is essential for supporting security initiatives by ensuring that business and security requirements are accurately captured, documented, communicated, and managed. The role partners with project stakeholders and Information Security Services to evaluate needs, propose solutions, and facilitate agreement on implementation. As a subject matter expert, the Senior Security Business Analyst provides actionable insights that enable effective decision-making and risk mitigation.

As a member of the Information Security Service Delivery team, the Senior Security Business Analyst role successfully and efficiently drives business process improvement via the methodical investigation, analysis, review and documentation of all or part of a business in terms of business functions and processes.

Your key responsibilities

• Elicita on, analyzing, documen ng, and managing business and security requirements for complex projects within the Enterprise Security Program.
• Collabora on with business, security, technical, and project management stakeholders to ensure requirements are clear, feasible, and aligned with organiza onal objec ves.
• Partnering with Security Quality Assurance staff to validate and test security solu ons to confirm they meet documented requirements.
• Tracing requirements to the corresponding code, policy, confirma on, or other implementa on ar facts, as well as to the test cases that validate them.
• Contribu ng to con nuous improvement of security business analysis processes and tools as a subject ma er expert both in terms of business analysis and the security domain.
• Sharing of knowledge and best prat ces with peers to support team effec veness.

Skills and attributes for success

To be successful in this role, candidates should possess the following core skills:

• Strong ability to communicate fluently in English and adapt communications to various audiences, including Executives, Sponsors, Management, overall organization and project teams – includes verbal, written and presentation skills
• Breakdown barriers of delivery with well thought out challenges and escalations, if necessary
• Personal accountability to adhere and comply of all required business analyst deliverables and requirements
• Ability to collaborate across functional teams, cultures and geographies and to build trust virtually
• Strong working knowledge or experience with Identity and Access Management
• Track record of customer focus that is based on openness, trust, and delivering on promises
• Extensive experience writing and reviewing business, user, and non-functional/system level requirements
• Highly adept at obtaining alignment and approval of business requirements (functional and supplemental) from user community
• Extensive experience in selecting and executing elicitation techniques such as Interviews, Exploratory Prototypes, Facilitated Workshops, Focus Groups, Observation, User Task Analysis, Documentation Study and Surveys and overall Process Re-engineering
• Development and deployment of formal business analysis methods and tools to govern and control programs
• Solid understanding of the following requirements models: Stakeholder Categories, Actor Tables, Glossary, Context Diagram, Data Model, Class Model, Data Dictionary, Event Response Tables,State Diagrams, Business Rules, Decision Tables, Process Maps, Use Cases, and Activity Diagrams
• Leader in the use of IT methodologies, processes and standards for business analysis

Desired qualifications

• Preferably 8–10 years’ experience in business analysis within the information security domain for large, geographically diverse programs.
• Strong expertise in security technologies (cloud, network, perimeter, messaging, endpoint, and data security).
• Proficiency in requirements management methodologies and tools.
• Advanced communication and stakeholder engagement skills.
• Relevant certifications (e.g., CISSP, CISM, CBAP) are highly desirable.

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.

Select how often (in days) to receive an alert:

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.