Senior IT Security Business Analyst SoD, Least Privilege, Zero Trust, CIS, COBIT, NIST, ISO 270[...]

Diverse CG Sp. z o.o. Sp.k.; Województwo mazowieckie; On-site; PLN 120,000 - 180,000; Full time

Benefits offered by this job

Private medical care

Co‑financing for the sports card

Constant support of dedicated consultant

Job summary

A leading security firm in Poland is looking for a Senior IT Security Business Analyst experienced in Secrets Management. The candidate will gather functional requirements, facilitate workshops, and support tool evaluations. Strong communication skills and knowledge of PAM security best practices are essential. The role offers private medical care and sports card co-financing. Fluency in English is required.

Qualifications

• Experience working with risk management area.
• Experience from previously completed vendor selection for Secrets Management.
• Knowledge of identity & PAM security best practices.

Responsibilities

• Act as an IT Security Business Analyst within the PAM/IAM organization.
• Gather, analyze, and document functional requirements related to Secrets Management.
• Facilitate and lead workshops with stakeholders.

Skills

Risk management

Collaboration and communication skills

Change management

PAM and Secrets Management knowledge

Technical analytical skills

Fluency in English

Job description

Senior IT Security Business Analyst

Responsibilities:

• Act as an IT Security Business Analyst within the PAM/IAM organization, focusing on Secrets Management
• Gather, analyze, and document functional requirements, use cases, and gaps related to Secrets Management
• Facilitate and lead workshops and meetings with key stakeholders to elicit and validate requirements
• Support the assessment of business needs and security requirements and translate them into actionable inputs for technical teams
• Contribute to identifying and evaluating tools and solutions for Secrets Management
• Support the team in conducting Proof of Concepts (PoCs) for selected solutions
• Assist in preparing implementation plans and support project execution
• Collaborate closely with Project Manager, Product Owner, Process Owner, IAM Architect, and SMEs
• Track and maintain requirements documentation and progress throughout the project lifecycle
• Contribute to improving the maturity of PAM and Secrets Management capabilities within the organization

Requirements:

• Experience working with risk management area
• Experience from previously completed Vendor selection for Secrets Management - including documentation of functional and non-functional requirements, use-cases
• Great collaboration, communication and negotiation skills for working with various stakeholders
• Experience working within change management
• Knowledge of identity & PAM security best practices, for both on-premise and cloud environments
• Knowledge of fundamental security approaches and principles (such as SoD, Least Privilege, Zero Trust)
• Previous experience working in a DevOps team in Agile/Scrum setup
• Understanding of IT processes and system development lifecycle
• Familiarity with Cyber Security controls and frameworks (such as CIS, COBIT, NIST, ISO 2700x)
• Strong technical analytical and documentation skills
• A structured and organized way of working with the ability to deliver results with high quality
• The ability to do conversion between business and technical context
• A strong can-do attitude and self-driven approach
• Fluency in English (spoken and written)

Nice to have

• Previous experience working with CyberArk technology
• Experience working with PAM and Secrets Management
• Experience working with PAM controls & requirements

Offer:

• Private medical care
• Co‑financing for the sports card
• Constant support of dedicated consultant