Business Analyst - Cybersecurity projects

Role overview

Minimum requirements

• At least five years of Business Analyst experience within large-scale enterprise transformation programmes.
• At least three to five years of hands-on experience on cybersecurity, information security, or security operations projects.
• Experience translating security, compliance, audit, risk, or governance requirements into business and technical solutions.
• Experience in regulated, compliance-driven, or audit-focused environments.
• Ability to work across business, security, technology, and delivery teams.

Security and transformation delivery

• Lead the Business Analysis approach across critical security workstreams.
• Translate security policies, risks, and compliance requirements into practical business solutions.
• Define and document security requirements, processes, controls, and operating procedures.
• Ensure traceability from business requirements through to technical implementation.

Business process design

• Design end-to-end business processes that embed security by design.
• Create process maps, data flows, RACI models, governance frameworks, and operational procedures.
• Identify gaps, risks, dependencies, and opportunities for improvement.

Stakeholder management

• Facilitate workshops with senior business and technical stakeholders.
• Drive alignment across Security, Technology, Compliance, PMO, and Delivery teams.
• Act as the bridge between business objectives and security requirements.

Governance, risk, and compliance

• Support audit readiness and compliance initiatives.
• Contribute to risk reduction and security governance programmes.
• Help define success measures, benefits realisation, and programme reporting.

Compensation and contract

• The salary is R25,000–R35,000 per month.
• The engagement is a 12-month contract with renewal potential within a three-year programme.