BX CISO Senior Business Analyst

Anticipated Contract End Date/Length: September 30, 2026
Work Set Up: Hybrid

Our client in the Information Technology and Services industry is looking for a BX CISO Senior Business Analyst to act as a key bridge between business functions and the Chief Information Security Officer organisation. This role supports cyber security initiatives by ensuring they align with business outcomes, regulatory requirements, and technology strategy. The position focuses on analysing security programmes, defining business requirements and operating models, and supporting governance and reporting activities to enable effective implementation of cyber security initiatives across the organisation.

What you will do:

• Conduct business analysis activities for cyber security programmes including data protection, identity, vulnerability management, cloud security, and regulatory compliance.
• Define business requirements, process maps, operating models, and service definitions for security initiatives.
• Analyse regulatory changes such as DORA, NIS2, and ISO27001 updates and support implementation planning.
• Document current workflows, assess operational gaps, and design future state processes that support security objectives.
• Produce governance materials including reports, dashboards, risk summaries, and board level documentation for CISO leadership.
• Collaborate with business stakeholders to gather requirements and ensure alignment between security programmes and organisational objectives.
• Coordinate with Product, Technology, and Operations teams to embed security requirements early in project and product lifecycles.
• Support programme governance activities to ensure cyber security initiatives meet regulatory and operational expectations.

Qualifications

• Strong business analysis experience within cyber security or information security programmes.
• Solid understanding of risk and control frameworks as well as cyber security domains such as identity and access management, vulnerability management, and cloud security.
• Experience supporting regulatory compliance initiatives including frameworks such as DORA, NIS2, or ISO27001.
• Ability to define business requirements, process documentation, and operating models for complex programmes.
• Experience producing governance reports, dashboards, and executive level documentation.
• Proficiency with tools such as Visio, Confluence, Jira, and data modelling platforms.
• Strong stakeholder management and communication skills across technical and business teams.
• Ability to analyse complex processes and translate them into structured, actionable requirements

Additional Information

All your information will be kept confidential according to EEO guidelines.

Candidates must be legally authorized to live and work in the country where the position is based, without requiring employer sponsorship.

HelloKindred is committed to fair, transparent, and inclusive hiring practices. We assess candidates based on skills, experience, and role-related requirements.

We appreciate your interest in this opportunity. While we review every application carefully, only candidates selected for an interview will be contacted.

HelloKindred is an equal opportunity employer. We welcome applicants of all backgrounds and do not discriminate on the basis of race, colour, religion, sex, gender identity or expression, sexual orientation, age, national origin, disability, veteran status, or any other protected characteristic under applicable law.