Business Analyst; NIS

Position: Business Analyst (NIS)
## Business Analyst (NIS)
Apply locations:
Worthingtime type:
Full time posted on:
Posted Todaytime left to apply:
End Date:
August 3, 2026 (16 days left to apply) job requisition :
JR8619
** Closing Date
*
* Job Title:

NIS Business Analyst

Location:

Hybrid working between our head office in Worthing (circa 2 days pw) and home Contract Type:
Permanent

Hours:

37 hours per week, Monday - Friday Salary:
Commensurate to skills and experience
** About the role
** We’re looking for a Business Analyst to join our NIS Programme, supporting work that is central to strengthening the cyber resilience, operational safety and regulatory compliance of our water and wastewater services.

This is not a standard Business Analyst role. You’ll be working on a high-profile programme focused on critical national infrastructure, helping ensure our operational technology networks, systems and processes are secure, compliant and fit for the future. The work is broad, important and highly visible, with a clear connection to Southern Water’s wider digital and security objectives.

You’ll work across business, cyber, OT and technology teams to understand business needs, define clear and traceable requirements, and support the delivery of secure, compliant and sustainable change. A key part of the role will be ensuring that requirements, processes, controls and delivery outcomes can be traced back to NIS obligations and regulatory expectations.

This is a great opportunity for an experienced Business Analyst who enjoys working in complex, regulated environments and wants to apply their skills to work that has genuine organisational and societal impact.

What you’ll be responsible for:
* Leading requirements definition for NIS-related change, ensuring requirements are clear, structured and traceable to regulatory obligations
* Conducting business situation analysis to understand problems, identify risks and propose practical improvements
* Working with stakeholders across business, cyber, OT and technology teams to build shared understanding and alignment
* Modelling business processes, data flows and system interactions using techniques such as BPMN, UML, use cases or similar approaches
* Supporting the development of clear BA artefacts that enable strong governance, assurance and delivery confidence
* Ensuring traceability across BA deliverables, from regulatory obligations and programme scope through to design, build, testing and implementation
* Supporting acceptance testing, helping confirm that solutions meet business, security and regulatory needs
* Applying agreed BA methods, tools and templates to support consistent, high-quality delivery
* Helping identify risks, dependencies and impacts across systems, processes, controls and operational environments
** What you’ll bring to the role:
***** Essential
* *** Strong experience in business analysis, ideally within a regulated, security-sensitive or operational environment
* Proven ability to define, structure and manage requirements through workshops, user stories, use cases and other BA techniques
* Experience of process modelling, business process analysis and structured documentation
* Knowledge of modelling approaches such as BPMN, UML, process maps, data flows or user journeys
* Strong stakeholder management skills, with the ability to work confidently across technical and non-technical teams
* Ability to communicate complex information clearly through models, artefacts and written analysis
* Understanding of waterfall and/or agile delivery approaches
* Confidence working with ambiguity, asking the right questions and bringing structure to complex problems
*** Desirable
* *** Experience working with cyber security, operational technology, architecture, risk or security operations teams
* Exposure to critical national infrastructure, utilities, operational control rooms or OT environments
* Awareness of security frameworks or standards such as NIS CAF, NIST CSF or ISO 27001
* Experience supporting audits, assurance activity, regulatory submissions or evidence-based delivery
* Exposure to user acceptance testing or test planning
* Experience with in the utilities industry, particularly water or wastewater
*…