Overview
We are seeking a Senior Business Analyst specialized in Technical Cyber Security to develop and enhance our Cyber Exposure Management and Threat & Vulnerability Management capabilities. The selected candidate will collaborate with technical subject matter experts and operational teams to transform technical requirements into clear, actionable plans, metrics, and processes. This position focuses on bridging the gap between cybersecurity technicalities and business functionalities without being hands-on in engineering.
Responsibilities
- Lead structured workshops with Cyber Security and Technology experts to gather information on existing processes and requirements.
- Translate complex technical discussions into clear business and technical requirements, capabilities, and measurable outcomes.
- Map current and future state processes for Cyber Exposure and Vulnerability Management.
- Define Responsibility Assignment Matrix (RACI), ownership models, and cross-functional responsibilities.
- Identify capability gaps and drive process improvement initiatives.
- Support the design and assessment of Cyber Exposure capabilities across defined domains.
- Develop processes related to vulnerability management and security testing.
- Assist in creating capability roadmaps for enterprise-wide Exposure Management.
Requirements
- Strong experience as a Cyber Security or Technical Business Analyst with a focus on Cyber Exposure or Vulnerability Management.
- Proficient in translating security capabilities into business requirements and operating models.
- Knowledge of Threat & Vulnerability Management, Attack Surface Management, and Endpoint Security.
- Familiarity with Security Development Lifecycle (SDLC) and DevSecOps practices.
- Experience working collaboratively with Security Operations, Engineering, and Product teams.
- Excellent skills in requirements and process engineering.
- Competent in planning and facilitating technical workshops independently.
- Understanding of how security operations teams interact with product engineering in managing security vulnerabilities.