Business Analyst – Cyber Security (Hybrid, 6‑Month Contract)

About the role

We are seeking a Business Analyst with strong cyber‑security experience to join a high‑impact programme for a leading UK utility. The role is hybrid (minimum one day onsite) on a six‑month contract inside IR35, focusing on initiatives such as Certificate Lifecycle Management and Anti‑Phishing solutions.

Key responsibilities

• Drive requirements gathering across complex cyber and infrastructure environments.
• Produce AS‑IS and TO‑BE process maps, perform gap analysis and impact assessments.
• Collaborate with stakeholders to define solutions aligned with security frameworks (NCSC CAF, ISO 27001, NIST).
• Support the organisation in market‑facing activities for new cybersecurity solutions.

Required profile

• Proven business analysis experience on cybersecurity projects.
• Strong understanding of security frameworks and controls.
• Experience across GRC, IAM/PAM, infrastructure or security tooling (desirable).
• Confident stakeholder engagement in complex environments.

Required skills

• NCSC CAF
• ISO 27001
• NIST
• GRC
• IAM
• PAM

What we offer

• Opportunity to contribute to a high‑profile security programme within critical national infrastructure.
• Hybrid working model with exposure to senior stakeholders.