Senior Business Analyst – IAM & Security

Senior Business Analyst

Responsibilities

Business Analysis & Requirements Management

Elicit, analyze, document, and validate business, functional, and non-functional requirements for security and IAM initiatives.

Translate complex security and technical requirements into clear business requirements and user stories.

Facilitate workshops and stakeholder discussions to gather requirements and align priorities.

Create business process flows, use cases, data flows, and process documentation.

Support Agile, Waterfall, and hybrid delivery methodologies.

Security & IAM Program Support

Partner with security architects and engineering teams on initiatives involving:

• Authentication and Authorization
• Single Sign-On (SSO)
• Multi-Factor Authentication (MFA)
• Identity Governance and Administration (IGA)
• Privileged Access Management (PAM)
• Role-Based Access Control (RBAC)
• Conditional Access
• Cloud Identity Management
• AI and Agentic Identity Governance

Assist in documenting identity lifecycle processes, access review requirements, entitlement models, and governance controls.

Support implementation and enhancement of security policies, standards, and procedures.

Governance, Risk & Compliance

Assist in audit readiness activities and evidence collection.

Support regulatory and compliance assessments related to identity and access management.

Track remediation activities, risk findings, and control improvements.

Collaborate with Risk Management, Compliance, and Internal Audit teams.

Data Analysis & Reporting

Analyze security, IAM, and operational data to identify trends, risks, and improvement opportunities.

Develop dashboards, metrics, and executive reporting materials.

Support KPI, KRI, and performance reporting for security initiatives.

Perform data validation, quality assessments, and business impact analysis.

Stakeholder Management

Act as a liaison between business stakeholders, security teams, and technology organizations.

Facilitate communication across technical and non-technical audiences.

Support program governance, steering committee reporting, and executive presentations.

Manage project documentation and maintain requirement traceability.

Qualifications

Bachelor’s degree in Information Systems, Computer Science, Cybersecurity, Business Administration, or a related discipline.

5+ years of Business Analysis experience, preferably supporting Information Security, Cybersecurity, IAM, or Technology programs.

Experience working with security, cloud, or identity-related initiatives.

Strong requirements gathering, documentation, and stakeholder management skills.

Experience creating:

• Business Requirements Documents (BRDs)
• Functional Requirements Documents (FRDs)
• User Stories and Acceptance Criteria
• Process Flow Diagrams
• Data Models and Reporting Requirements

Strong analytical, problem-solving, and organizational skills.

Excellent written and verbal communication skills.