Business Analyst - Cyber Security - Investment Banking - Bonhill Partners

Role: Cyber SecurityBusiness Analyst Client: Investment Bank Location: London, 4 days in office Contract duration: 6 months rolling Rate: £650 (inside IR35) Responsibilities: • Elicit, analyse, and document business and technical requirements for IAM and PAM programmes. • Facilitate workshops with business, security, technology, and risk stakeholders. • Support the implementation and enhancement of: • Identity Governance & Administration (IGA) • Privileged Access Management (PAM) • Role-Based Access Control (RBAC) • Single Sign-On (SSO) • Multi-Factor Authentication (MFA) • Access Certification and Recertification • Joiner, Mover, Leaver (JML) processes • Segregation of Duties (SoD) controls • Analyse current-state and target-state access management processes. • Produce high-quality documentation including: • Business Requirements Documents (BRDs) • Functional Specifications • User Stories and Acceptance Criteria • Process Maps • Gap Analysis • Data Flow Diagrams • Work with technical teams to ensure IAM/PAM solutions meet business and security requirements. • Support User Acceptance Testing (UAT), defect management, and implementation activities. • Assist with audit, risk, and compliance reviews related to identity and privileged access controls. • Contribute to governance frameworks, policies, and operational procedures. Required Experience • 5+ years' experience as a Business Analyst within Cyber Security, IAM, or PAM programmes. • Strong understanding of Identity & Access Management principles and controls. • Hands-on experience supporting IAM and PAM implementations. • Experience gathering and documenting requirements for security-focused projects. • Strong stakeholder management skills, including engagement with senior business and technical leaders. • Knowledge of access governance, entitlement management, privileged account controls, and identity lifecycle management. • Experience working within Agile and/or Waterfall delivery environments. Desirable Technology Experience Experience with one or more of: • CyberArk • BeyondTrust • Delinea • SailPoint • Saviynt • Microsoft Entra ID • Okta • Ping Identity Desired Knowledge • Identity Governance & Administration (IGA) • Privileged Session Management (PSM) • Privileged Account Governance • Access Request & Approval Workflows • Directory Services (Active Directory / Entra ID) • Zero Trust principles • ISO 27001, NIST, SOX, FCA, PRA, GDPR • Cyber Security Risk and Controls