Senior IT Security Business Analyst SoD, Least Privilege, Zero Trust, CIS, COBIT, NIST, ISO 270[...]

Senior IT Security Business Analyst

Responsibilities

• Act as an IT Security Business Analyst within the PAM/IAM organization, focusing on Secrets Management
• Gather, analyze, and document functional requirements, use cases, and gaps related to Secrets Management
• Facilitate and lead workshops and meetings with key stakeholders to elicit and validate requirements
• Support the assessment of business needs and security requirements and translate them into actionable inputs for technical teams
• Contribute to identifying and evaluating tools and solutions for Secrets Management
• Support the team in conducting Proof of Concepts (PoCs) for selected solutions
• Assist in preparing implementation plans and support project execution
• Collaborate closely with Project Manager, Product Owner, Process Owner, IAM Architect, and SMEs
• Track and maintain requirements documentation and progress throughout the project lifecycle
• Contribute to improving the maturity of PAM and Secrets Management capabilities within the organization

Requirements

• Experience working with risk management area
• Experience from previously completed Vendor selection for Secrets Management – including documentation of functional and non-functional requirements, use‑cases
• Great collaboration, communication and negotiation skills for working with various stakeholders
• Experience working within change management
• Knowledge of identity & PAM security best practices, for both on‑premise and cloud environments
• Knowledge of fundamental security approaches and principles (such as SoD, Least Privilege, Zero Trust)
• Previous experience working in a DevOps team in Agile/Scrum setup
• Understanding of IT processes and system development lifecycle
• Familiarity with Cyber Security controls and frameworks (such as CIS, COBIT, NIST, ISO 2700x)
• Strong technical analytical and documentation skills
• A structured and organized way of working with the ability to deliver results with high quality
• The ability to do conversion between business and technical context
• A strong can‑do attitude and self‑driven approach
• Fluency in English (spoken and written)

Nice to have

• Previous experience working with CyberArk technology
• Experience working with PAM and Secrets Management
• Experience working with PAM controls & requirements

Offer

• Private medical care
• Co‑financing for the sports card
• Constant support of dedicated consultant