OT/Cyber Business Analyst

About the Role

As the Cyber Security Business Analyst, you will support the full project lifecycle, from discovery and requirements gathering through to implementation, operational transition and benefits realisation. You will analyse complex technical and operational environments, facilitate stakeholder engagement, and help shape future-state cyber security capabilities and ways of working.

This role goes beyond traditional requirements gathering, with a strong focus on solution implementation, testing, change support and operational adoption.

Key Responsibilities

Business Analysis & Discovery

• Lead business analysis activities across project lifecycles.
• Gather, document and validate business, functional, non-functional and transition requirements.
• Analyse existing processes, systems and cyber security controls.
• Facilitate workshops and stakeholder engagement sessions across cyber, IT, OT and leadership teams.
• Develop recommendations and evaluate solution options.

Project Delivery

• Maintain traceability between business objectives, requirements, solution design and delivery outcomes.
• Support stakeholders throughout implementation to ensure solutions meet business needs.
• Help design future-state processes, operating models, roles and reporting capabilities.
• Develop and update operational documentation, policies and procedures.

Testing & Transition

• Support test planning, execution, defect management and reporting activities.
• Assist with business readiness, organisational change and operational transition activities.
• Contribute to project documentation including business cases, scope documents and requirements traceability matrices.

About You

To be successful in this role, you will bring:

• 10+ years of Business Analysis experience, including significant experience delivering cyber security initiatives.
• Proven experience working onCyber Defence programs such as:
  • Security Operations Centre (SOC) implementation or uplift
  • Managed Detection and Response (MDR)
  • SIEM and SOAR platforms
  • Vulnerability Management programs
  • Incident Response capability uplift
• Strong experience working across both IT and Operational Technology environments.
• Excellent stakeholder engagement, workshop facilitation and communication skills.
• Demonstrated ability to translate complex cyber security concepts into clear business requirements and project artefacts.
• Experience supporting testing, implementation, organisational change and operational adoption activities.
• Knowledge of cyber security frameworks and standards such as NIST CSF, ISA/IEC 62443, MITRE ATT&CK and SOCI obligations.
• Experience within critical infrastructure, utilities, resources or similarly complex operational environments.
• Relevant Business Analysis, Cyber Security or Information Technology qualifications and/or certifications.

Why Apply?

This is a rare opportunity to contribute to high-profile cyber security initiatives that deliver tangible outcomes within a complex operational environment. You'll work alongside experienced cyber professionals and stakeholders while helping shape critical cyber defence capabilities for the future.

Apply now or contact us for a confidential discussion regarding this opportunity.