Senior Business Analyst

Senior Business Analyst – Identity & Access Management (IAM)

London | Hybrid – 3 days per week on site | Active SC or CTC clearance required | Up to £66,000

Who you'll be working with

A growing digital consultancy is looking for a Senior Business Analyst to join its Identity practice, supporting a major identity transformation programme.

This is an opportunity for an experienced BA with a genuine background in Identity and Access Management (IAM) to work at the intersection of business analysis, cyber security and technology.

You'll work alongside identity specialists, engineers and transformation teams, helping organisations make sense of complex access requirements and turn them into practical, implementable solutions.

What you'll be doing

• Leading discovery sessions with application owners, business stakeholders, security teams and service owners to understand access requirements, risks and existing processes.
• Defining and documenting Role-Based Access Control (RBAC) models, user roles, permissions and entitlements.
• Mapping current and future-state identity processes, covering access requests, approvals, provisioning, access reviews, changes and removal of access.
• Gathering and translating complex or undocumented requirements into clear, structured documentation that technical teams can implement.
• Defining application onboarding and identity-provider integration requirements for Microsoft Entra ID (Azure AD) or equivalent platforms.
• Facilitating workshops, challenging assumptions and bringing stakeholders together to agree requirements and proposed solutions.
• Identifying opportunities to improve identity processes, access governance and operational efficiency.
• Supporting testing and validation to ensure solutions meet business and user requirements.

What we're looking for

• Proven experience as a Business Analyst within Identity and Access Management (IAM), Identity Governance and Administration (IGA), or a closely related identity transformation environment.
• A solid understanding of RBAC, access controls, roles, permissions and entitlements.
• Experience gathering and documenting technical requirements for identity systems, application onboarding or identity integrations.
• Exposure to Microsoft Entra ID (Azure AD) or another identity provider, such as Okta, SailPoint, Saviynt or Ping Identity.
• Strong discovery, workshop facilitation, process mapping and stakeholder management skills.
• The ability to translate complex business and technical requirements into clear, implementation-ready outputs.
• A consultancy mindset, with the confidence to challenge assumptions and work across business and technical teams.
• Active Security Check (SC) or Counter Terrorist Check (CTC) clearance — essential.

What's in it for you?

• Join a specialist Identity practice within an established digital consultancy.
• Work alongside multidisciplinary teams across identity, technology, design and delivery.
• Take ownership of discovery, requirements and identity process design rather than focusing solely on generic BA activities.
• Be part of a collaborative consultancy that values human-centred design, continuous improvement and meaningful client outcomes.