Security Business Analyst

Salary: £? - ? per year

Requirements

• Strong experience across security, GRC, controls, engineering, or infrastructure
• Proven experience implementing CIS Controls in large enterprise environments
• Excellent understanding of security assurance, controls testing, and governance
• Knowledge of cloud security controls
• Excellent stakeholder management and communication skills
• Relevant security certifications preferred
• Retail sector experience desirable
• Strong analytical and problem-solving abilities desirable
• Experience working in complex, fast-paced environments desirable

Responsibilities

• Lead the assessment, analysis, and remediation of enterprise security control gaps against the CIS Controls framework
• Translate technical security requirements into actionable delivery plans
• Coordinate stakeholders and drive control implementation, assurance, audit readiness, and operational handover
• Conduct CIS Controls gap and maturity assessments
• Map security gaps against regulatory and compliance requirements
• Define control ownership, standards, and acceptance criteria
• Work closely with technical teams to support successful control implementation
• Perform assurance reviews and track delivery against requirements
• Support risk, dependency, and stakeholder management across multiple workstreams
• Assist with audits and transition controls into business-as-usual operations

Technologies:

• Cloud
• Support
• Security

More:

We are offering a six-month contract for a Security Technical Business Analyst in the retail sector. The role is based in London, with four days per week in the office and one day remote. The contract is inside IR35, at £500 per day.

last updated 40 week of 2026