Lead Business Analyst/BA-Cybersecurity Domain
Reserve Bank Information Technology · Mumbai · onsite · Posted 70d ago
Undisclosed7–10 yrsfulltimeSourced from
About a minute. You'll make an account on the way through.
About this role
- 7+ years of experience as Business Analyst in cybersecurity or a related field
- Strong understanding of cybersecurity domains: IAM, SOC, SIEM, SOAR, DLP, GRC, Application, Network and cloud security.
- Strong understanding of cybersecurity principles, technologies, and regulations.
- Familiarity with cybersecurity frameworks and standards (e.g., NIST, CIS, ISO 27001)
- Excellent analytical and problem-solving skills
- Strong communication and interpersonal skills
- Experience with project management methodologies (e.g., Agile, Waterfall)
- Expertise in business process modeling tools (e.g., BPMN, Visio) and requirements management platforms (e.g., JIRA, Confluence).
- Exceptional communication, stakeholder management, and leadership skills.
- Lead comprehensive business analysis for cybersecurity initiatives, including SOC modernization, threat management, vulnerability management, IAM, data protection, and compliance.
- Collaborate directly with SOC analysts, threat hunters, and incident responders to understand operational workflows, log ingestion pipelines, alert triage, and escalation protocols.
- Translate SOC use cases into business requirements, covering threat detection, correlation rules, playbook automation, and SIEM tuning (e.g., QRadar, Splunk).
- Conduct threat modeling and risk assessments, aligning mitigation strategies with RBI cybersecurity guidelines, NIST CSF, ISO 27001, and MITRE ATT&CK.
- Analyze and optimize cybersecurity processes, identify gaps in detection coverage, response time, and tool interoperability across SOC platforms.
- Lead security-related projects, managing scope, timelines, and stakeholder expectations across cross-functional teams
- Drive integration of cybersecurity tools such as SOAR, SIEM, EDR, IAM, and PAM with enterprise systems, ensuring seamless data flow and actionable intelligence.
- Aware of emerging threats, APT tactics, and regulatory changes, advising leadership on strategic adjustments to security posture and investment priorities.
- Create and maintain detailed documentation, including process flows, business requirement document, use cases, traceability matrices, and control mappings
- Collaborate on the design and implementation of security controls, ensuring they meet both business objectives and technical feasibility.
- Facilitate workshops, tabletop exercises, and post-incident reviews, translating findings into process improvements and updated documentation.
- Support secure SDLC and DevSecOps practices, embedding security requirements into CI/CD pipelines and Agile delivery frameworks.
- Mentor junior analysts and BAs, fostering cybersecurity literacy, analytical rigor, and stakeholder engagement excellence.
- Act as a liaison between business units and cybersecurity teams, ensuring clarity, alignment, and accountability in all security initiatives.
- CBAP (Certified Business Analysis Professional)
- Agile or Scrum certifications (CSPO, SAFe, Six Sigma)
- CompTIA Security/ CEH / CISSP
- Experience with cybersecurity tools and technologies (e.g., SIEM, IDS/IPS, firewalls)
- Knowledge of Data Science concepts
Sourced from naukri
Skills
Business AnalystCyber SecurityIT SecurityInformation Security
About Reserve Bank Information Technology
Reserve Bank Information Technology
IT Services & Consulting
1k+
employees
2016
10 years old
Navi Mumbai, Maharashtra
US
₹13.9L PA avg
Avg at Reserve Bank Information Technology
About
ReBIT is the technology arm of the Reserve Bank of India. A subsidiary of RBI, ReBIT delivers secure, scalable, and specialized IT solution for central banking through products, projects and platform.
Industries
IT Services & ConsultingFinancial Services
Employee ratings
10 reviews
3.4/ 5
Culture
3.5
Career growth
2.6
Work-life
3.6
Employees rate it well for
Work-Life Balance37Job Security35
Find them on