Business Analyst - Cybersecurity projects

THIS IS A BA ROLE - NOT LOOKING FOR SECURITY ENGINEERS / SECURITY ANALYSTS

Snr Business Analyst with some Information Security / Cyber security project experience

MUST HAVE at least 3-5 years hands-on experience on cybersecurity-focused projects / Information Security (Infosec) / Cybersecurity / SecOps specifically

Salary: R25 000 - R35 000 per month

12 Months Contract (Renewal - 3 year programme)

🚨 Minimum Requirements

✔ 5+ years' experience as a Business Analyst within large-scale enterprise transformation programmes

✔ MUST HAVE at least 3-5 years hands-on experience on cybersecurity-focused projects / Information Security (Infosec) / Cybersecurity / SecOps specifically

• If cybersecurity or any security related projects not mentioned in profile or CV - you will automatically be rejected (we need to see mentions of security in CV)

✔ Experience translating security, compliance, audit, risk, or governance requirements into business and technical solutions

✔ Experience working within regulated, compliance-driven, or audit-focused environments

✔ Ability to work across business, security, technology, and delivery teams

An industry-leading global organisation is seeking an experienced Security Business Analyst to play a pivotal role in a major enterprise transformation programme.

You'll operate at the intersection of Cybersecurity, Information Security, Business Transformation, Compliance, and Technology Delivery , helping ensure security is embedded into every stage of programme execution.

What You'll Be Doing

Security & Transformation Delivery

• Lead the Business Analysis approach across critical security workstreams
• Translate security policies, risks, and compliance requirements into practical business solutions
• Define and document security requirements, processes, controls, and operating procedures
• Ensure traceability from business requirements through to technical implementation

Business Process Design

• Design end-to-end business processes that embed security by design
• Create process maps, data flows, RACI models, governance frameworks, and operational procedures
• Identify gaps, risks, dependencies, and opportunities for improvement

Stakeholder Management & Workshops

• Facilitate workshops with senior business and technical stakeholders
• Drive alignment across Security, Technology, Compliance, PMO, and Delivery teams
• Act as the bridge between business objectives and security requirements

Governance, Risk & Compliance

• Support audit readiness and compliance initiatives
• Contribute to risk reduction and security governance programmes
• Help define success measures, benefits realisation, and programme reporting