Business Analyst - Cyber Security

As a Business Analyst in the cybersecurity domain, your main responsibilities will include gathering, analyzing, and documenting business requirements for cybersecurity products, tools, and services. You will collaborate with stakeholders to define use cases, workflows, and business processes aligned with cybersecurity best practices. It will be your duty to translate business needs into functional and technical specifications for engineering teams. You will also support risk assessments and compliance initiatives by analyzing existing systems and identifying security gaps. Monitoring industry trends and threat intelligence to inform product and business strategy will be essential. Additionally, you will assist with business case development, including cost-benefit analysis and ROI projections. Working closely with QA and DevOps teams to ensure solutions meet business and regulatory requirements is also part of the role. Your responsibilities will also involve preparing detailed reports and presentations for internal and external stakeholders, as well as facilitating meetings, interviews, and workshops to elicit requirements and feedback. To qualify for this role, you should possess an Engineering Degree in Computer Science, Information Systems, Cybersecurity, or a related field. A minimum of 7 years of experience as a Business Analyst, with a strong focus on cybersecurity, is required. A deep understanding of cybersecurity principles, frameworks, and the threat landscape (e.g., SIEM, SOAR, XDR, or TIP) is essential. Experience with GenAI/LLM use cases in security contexts would be highly beneficial. You should also have proven experience in business process modeling, data analysis, and documentation. Familiarity with compliance requirements such as GDPR, HIPAA, or SOC 2 is considered a plus. Proficiency in tools like JIRA, Confluence, Visio, or similar platforms is required. Strong communication and interpersonal skills are crucial to effectively collaborate with both technical and non-technical stakeholders.,