Business Analyst (Cyber Controls & Compliance) - Contract

We are seeking a Business Analyst with experience supporting Cyber Security, controls, governance or compliance initiatives.

The role will focus on documenting and improving business processes, facilitating stakeholder workshops, gathering requirements and producing high-quality documentation to support Cyber Security and compliance outcomes.

This is a hybrid contract role, based 2-3 days a week in West London.

Role:

• Document current-state and future-state business processes, producing process maps and supporting documentation.
• Facilitate stakeholder workshops to gather requirements, understand control gaps and identify process improvements.
• Work with security, technology and business teams to understand control requirements and implementation activities.
• Support the production and maintenance of evidence packs, control documentation and supporting artefacts for assurance and compliance activities.
• Document safeguards, control implementations and control acceptance evidence where required.

Skills

• Proven Business Analysis experience across technology, Cyber Security or compliance-led change initiatives.
• Strong experience documenting As-Is and To-Be processes, process maps and operating procedures.
• Experience facilitating stakeholder workshops and gathering business requirements.
• Experience producing requirements documentation, user stories and business artefacts.
• Understanding of Cyber Security, technology risk and control frameworks.
• Experience working with recognised frameworks such as CIS Controls, Cyber Essentials, NIST CSF or ISO27001.
• Experience documenting controls, safeguards, risks and compliance evidence.