Senior Security Business Analyst _ Data Security & Governance

Senior Security Business Analyst Data Security & Governance

Digital Data Consultancy Limited is seeking an experienced Senior Security Business Analyst to support a UK-based organisation on a Data Discovery and Data Security Assessment engagement.

Experience: 10+ Years
Engagement: Contractual / Project-Based Consultancy
Compensation: 2,00,000 per month
Location/Working Arrangement: To be agreed, including any required onsite attendance.

Key Responsibilities

• Lead/support discovery workshops, stakeholder interviews and requirements-gathering sessions.
• Gather and document business, data, technical, security and compliance requirements.
• Translate business risks and security concerns into structured and actionable requirements.
• Document data sources, business processes, data flows, ownership, access permissions and CRUD responsibilities.
• Review the current data-security architecture and control environment.
• Identify security/control gaps, inconsistent processes, unclear responsibilities and areas requiring further investigation.
• Support data-security maturity assessment and preparation of risk registers.
• Analyse regulatory/security requirements including UK GDPR, Data Protection Act 2018, ISO 27001, NIS2 and relevant aviation-security requirements.
• Prepare requirements catalogues, process diagrams, stakeholder matrices, gap assessments and supporting evidence.
• Contribute to the Data Security Baseline Review and development of prioritised security improvement recommendations.
• Present findings to business and technical stakeholders.

These responsibilities closely follow the attached JD's discovery, requirements, data/process discovery and security maturity responsibilities.

Essential Requirements

• Minimum 10 years of relevant professional experience.
• Strong experience as a Business Analyst / Security Business Analyst / Cybersecurity Analyst / Data Governance Business Analyst.
• Experience in cybersecurity, data protection and information-governance requirements.
• Strong understanding of information security, access control, identity management, encryption, audit logging, network security, data protection and incident management.
• Working knowledge of UK GDPR, Data Protection Act 2018 and ISO 27001.
• Strong requirements elicitation, current-state analysis, process modelling and data-flow documentation skills.
• Experience preparing requirements catalogues, RACI/CRUD matrices, risk registers and gap assessments.
• Excellent stakeholder management, workshop facilitation and communication skills.

The original JD specifies these capabilities, although its original minimum experience requirement is five years; 10+ years is your revised requirement for this posting.

Desirable

• Experience in aviation, airports, transport, critical national infrastructure or another regulated sector.
• Knowledge of NIS2, aviation cybersecurity and CAP 1753.
• Experience with data discovery, data cataloguing, metadata management and data-governance programmes.
• Familiarity with Azure, Microsoft 365, databases, data lakes and SaaS applications.
• Certifications such as BCS Business Analysis, CBAP/CCBA, CISSP, CISM, CompTIA Security+ or ISO 27001 are desirable.

Additional Requirement: Background Security Check required. The attached JD describes the delivery model as a project-based consultancy assignment and states that the working arrangement will be agreed with DDC and LLA, including any onsite attendance.