Overview
We are seeking an experienced IT Security Controls Business Analyst to join our team on a hybrid basis for an initial 6-month contract. This role focuses on managing workforce management controls and ensuring compliance with security protocols in collaboration with technical analysts from Saviynt, Active Directory, and ServiceNow. The successful candidate will play a key role in eliciting requirements, designing system controls, and overseeing testing activities to enhance security measures and support the organization’s objectives.
Responsibilities
- Deliver security control requirements and document them based on JML policy.
- Manage workforce data remediation and reconciliation across HRIS and identity systems.
- Produce test strategies, test plans, and test scenarios tracing back to requirements.
- Oversee the execution of Unit Testing, System Integration Testing (SIT), and User Acceptance Testing (UAT).
- Facilitate stakeholder workshops and communication across HR, IT, Internal Audit, and line managers.
- Quality assure deliverables related to requirements, functional and technical specifications.
- Create cutover plans and support service transitions and Hypercare.
- Monitor and report on security training requirements and effectiveness.
Requirements
- Minimum of 5 years of experience as a business analyst in IT security controls.
- Proven track record of managing at least 3 full end-to-end project lifecycles on security projects.
- Experience with Saviynt, Active Directory, Entra ID, and ServiceNow.
- Strong data analysis skills for reconciling workforce data and creating exception reports.
- Knowledge of identity governance concepts including role-based access and user access reviews.
- Experience in designing and testing IT general controls and producing control evidence.
- Certification in business analysis or IT security, such as IIBA CBAP, BCS, CISA, CISM, or CISSP recommended.
- Strong stakeholder management and workshop facilitation skills.