The Security Business Analyst will support security initiatives from early concept through to delivery, helping define requirements, clarify priorities, and enable teams to move forward with confidence. Collaboration is central to the role. Working closely with security specialists, IT teams, and business stakeholders, the role will help build shared understanding of challenges, priorities, and desired outcomes across multiple initiatives. Responsibilities will include facilitating workshops, guiding discussions, and driving alignment between technical and business teams. The role requires translating complex or ambiguous inputs – such as risk assessments, regulatory requirements, audit findings, and strategic objectives – into structured outputs such as business requirements, user stories, process maps, impact assessments, and supporting documentation. Working across multiple initiatives simultaneously, the Security Business Analyst will help improve consistency, governance, visibility, and delivery alignment across the broader security portfolio.
We’re more interested in how someone approaches problem‑solving, collaboration, and delivery than in ticking every box.
Key Responsibilities
* Facilitate workshops, guide discussions, and drive alignment between technical and business teams.
* Translate complex or ambiguous inputs – such as risk assessments, regulatory requirements, audit findings, and strategic objectives – into structured outputs like business requirements, user stories, process maps, impact assessments, and supporting documentation.
* Support governance and visibility across multiple initiatives, ensuring consistency and delivery alignment across the security portfolio.
* Maintain a structured and analytical approach, simplifying complexity and supporting practical decision‑making.
Qualifications
* Experience working as a Business Analyst within cybersecurity, technology, risk, or transformation‑focused environments.
* Proven ability to elicit, analyse, and document business, functional, and non‑functional requirements across complex initiatives.
* Experience supporting security transformation, remediation, compliance uplift, or security maturity improvement programmes.
* Familiarity with recognised security frameworks and standards such as ISO 27001, NIST Cybersecurity Framework, or CIS Controls.
* Exposure to enterprise security domains such as vulnerability management, identity and access management, cloud security, governance and compliance, or security operations.
* Strong analytical and problem‑solving skills, including experience with process mapping, gap analysis, workflow optimisation, and impact assessments.
* Experience facilitating workshops, stakeholder discussions, and cross‑functional decision‑making sessions.
* Ability to build trusted relationships and communicate effectively with technical and non‑technical stakeholders at all levels of the organisation.
* Experience supporting governance, reporting, risk tracking, and delivery visibility across multiple initiatives.
* Familiarity with Agile, Scrum, Waterfall, or hybrid delivery methodologies, including use of tools such as Jira and Confluence.
* Comfortable working within globally distributed, matrixed organisations managing competing priorities and dependencies.
Nice to Have Skills and Experience
* Exposure to complex technology environments such as semiconductor, engineering, cloud, or advanced technology industries.
* Relevant certifications such as BCS Business Analysis, CBAP, CompTIA Security+, CISSP (not required).
Benefits
In return, this role offers an opportunity to work on meaningful security challenges at a time when Arm is evolving rapidly and shaping the future of computing. Arm technology powers billions of devices worldwide, and this role will contribute to protecting what comes next. You will gain exposure to a wide range of teams, technologies, and ways of working across the business, alongside continued development in an environment that values curiosity, collaboration, and continuous improvement.
#J-18808-Ljbffr