Lead Business Analyst/BA-Cybersecurity Domain
An AI agent that applies to roles like this on employers' own sites. 25 applications free, no card needed.
Posted over 15 days ago, so the role may have closed. Confirm on the employer's page when you apply, or see similar jobs.
Job Description
- 7+ years of experience as Business Analyst in cybersecurity or a related field
- Strong understanding of cybersecurity domains: IAM, SOC, SIEM, SOAR, DLP, GRC, Application, Network and cloud security.
- Strong understanding of cybersecurity principles, technologies, and regulations.
- Familiarity with cybersecurity frameworks and standards (e.g., NIST, CIS, ISO 27001)
- Excellent analytical and problem-solving skills
- Strong communication and interpersonal skills
- Experience with project management methodologies (e.g., Agile, Waterfall)
- Expertise in business process modeling tools (e.g., BPMN, Visio) and requirements management platforms (e.g., JIRA, Confluence).
- Exceptional communication, stakeholder management, and leadership skills.
- Lead comprehensive business analysis for cybersecurity initiatives, including SOC modernization, threat management, vulnerability management, IAM, data protection, and compliance.
- Collaborate directly with SOC analysts, threat hunters, and incident responders to understand operational workflows, log ingestion pipelines, alert triage, and escalation protocols.
- Translate SOC use cases into business requirements, covering threat detection, correlation rules, playbook automation, and SIEM tuning (e.g., QRadar, Splunk).
- Conduct threat modeling and risk assessments, aligning mitigation strategies with RBI cybersecurity guidelines, NIST CSF, ISO 27001, and MITRE ATT&CK.
- Analyze and optimize cybersecurity processes, identify gaps in detection coverage, response time, and tool interoperability across SOC platforms.
- Lead security-related projects, managing scope, timelines, and stakeholder expectations across cross-functional teams
- Drive integration of cybersecurity tools such as SOAR, SIEM, EDR, IAM, and PAM with enterprise systems, ensuring seamless data flow and actionable intelligence.
- Aware of emerging threats, APT tactics, and regulatory changes, advising leadership on strategic adjustments to security posture and investment priorities.
- Create and maintain detailed documentation, including process flows, business requirement document, use cases, traceability matrices, and control mappings
- Collaborate on the design and implementation of security controls, ensuring they meet both business objectives and technical feasibility.
- Facilitate workshops, tabletop exercises, and post-incident reviews, translating findings into process improvements and updated documentation.
- Support secure SDLC and DevSecOps practices, embedding security requirements into CI/CD pipelines and Agile delivery frameworks.
- Mentor junior analysts and BAs, fostering cybersecurity literacy, analytical rigor, and stakeholder engagement excellence.
- Act as a liaison between business units and cybersecurity teams, ensuring clarity, alignment, and accountability in all security initiatives.
- CBAP (Certified Business Analysis Professional)
- Agile or Scrum certifications (CSPO, SAFe, Six Sigma)
- CompTIA Security/ CEH / CISSP
- Experience with cybersecurity tools and technologies (e.g., SIEM, IDS/IPS, firewalls)
- Knowledge of Data Science concepts
Skills
Business AnalystCybersecurityInformation SecurityIT SecuritySecurityDNSBusiness AnalysisCyber SecurityAgileEngagementProject ManagementTacticsWaterfallIf a job posting appears fraudulent, asks for payment, contains misleading information, or violates our guidelines, please report it immediately. Our team will review it promptly, Jobaaj does not charge any fee from the applicants.
Similar Jobs
View allNew Risk Management & Compliance roles in Navi Mumbai.
One email a day. Unsubscribe any time.

