Cyber Risk Business Analyst (IAM)
Location: London (4 days onsite)
Rate: £625-650 per day (Inside IR35)
emagine is a high-end professional services consultancy and solutions firm specialising in delivering business and technology services to the financial services sector. We power progress, solve complex challenges, and deliver tangible results through tailored consulting and delivery excellence.
Our culture is built on openness, integrity, and strong partnerships, underpinned by our core values: Confident, Dedicated, Responsible, Genuine.
We are seeking a Cyber Risk Business Analyst with strong Identity & Access Management (IAM) expertise to support a high-profile programme focused on access governance, remediation, and IAM framework delivery.
This role will sit at the intersection of cyber risk, IAM engineering, and business stakeholders, driving the definition and delivery of secure, compliant access management solutions within a complex financial services environment.
Key Responsibilities
Business Analysis & Delivery
- Lead requirements gathering and produce high-quality Business Requirements Documents (BRDs) and Functional Specifications
- Deliver full end-to-end Business Analysis across the project life cycle, including:
- Solution design and stakeholder presentations (including data-led insights)
- Test strategy, test plans, and test case development
- System and integration testing
- Supporting and coordinating User Acceptance Testing (UAT)
- Test result analysis and reporting
- Produce project status updates, tracking progress, risks, and dependencies
- Proactively identify and escalate risks and issues
IAM & Cyber Risk Focus
- Drive analysis and delivery across Identity & Access Management (IAM) initiatives, including:
- Access governance and account remediation
- Role modelling, entitlements, and access reviews
- Segregation of Duties (SoD) and toxic combinations
- Work with application owners to define and document roles, permissions, and access models
- Support delivery of IAM solutions aligned to regulatory and audit requirements
- Contribute to the development and implementation of IAM frameworks, controls, and operating models
Stakeholder Engagement
- Act as a key liaison between Cyber Risk, IAM Engineering, Technology, and Business teams
- Facilitate workshops with SMEs to define requirements and validate solutions
- Translate complex technical and access-related concepts into business-friendly language
- Build strong stakeholder relationships to ensure effective delivery across the change portfolio
Technical & Analytical
- Apply strong analytical skills to investigate issues and provide evidence-based recommendations
- Perform SQL queries and data analysis where required
- Use advanced Excel for data validation, reporting, and modelling
- Support solution decisions with a solid understanding of IAM tools and vendor landscape
Key Requirements
- Strong Business Analyst experience within:
- IAM, Cybersecurity, or Technology Change programmes
- Deep understanding of Identity & Access Management concepts, including:
- RBAC (Role-Based Access Control)
- Least privilege
- Segregation of Duties (SoD)
- Access certification and remediation
- Proven experience working with application owners to define roles and permissions
- Experience delivering IAM solutions in complex, regulated environments
- Strong knowledge of access management frameworks and compliance standards (eg, EBA-ICT, NIST, FCA, COBIT, FFIEC)
- Experience in framework development and implementation
- Excellent stakeholder management, communication, and facilitation skills
- Strong analytical and problem-solving capabilities
The ideal consultants will share our values and be aligned with our ways of working and as your career progresses, you can expect to work across all areas of the project life cycle, from strategy to implementation. This will provide you with a broad base of experience from which to build an outstanding career.
The ideal consultants will share our values and be aligned with our ways of working and as your career progresses, you can expect to work across all areas of the project life cycle.
We pride ourselves on;
- Providing our people with a supportive culture, rooted in our values and driven by our purpose.
- Promoting a culture of inclusion, collaboration, well-being, and learning and development.
- Providing increased agility and flexibility within our hybrid working model
- Investing in employees' growth through ongoing training and development
- Autonomy to take ownership of projects, making decisions and demonstrating individual expertise
- Providing an transparent performance and career management experience.
Full job description from WhatJobs. Apply for this role →