Cyber Risk Business Analyst (Team Lead) – £120,000 + 20% Bonus – London (Hybrid) – Investment Banking
Overview
A global Investment Banking organisation is seeking a Cyber Risk Business Analyst Team Lead to manage a team of 13 and lead delivery across Cyber Risk and wider technology change programmes.
Role & Responsibilities
- Lead end-to-end business analysis across global technology change programmes across Risk, Finance, Front Office, Operations, Compliance, and Cyber Risk
- Manage and develop a team of 13 business analysts, including Cyber Risk BA capability
- Own end-to-end BA delivery including requirements gathering, functional specifications, solution definition, and stakeholder sign-off
- Define and execute test strategy, test plans and test cases; support system, integration, and UAT delivery
- Produce MI, KPIs, and senior-level delivery reporting across programmes
- Manage RAID (risks, issues, dependencies) and drive resolution and escalation where required
- Perform data-driven analysis and solution assessment using production data, advanced Excel, and SQL
- Act as SME for business analysis and technology solutions across stakeholders and delivery teams
- Support full SDLC delivery from requirements through to deployment and post-implementation support
- Ensure governance, auditability, and regulatory alignment across all deliverables
- Manage dual-hat / multi-entity considerations and resolve cross-priority conflicts where required
- Drive adoption of continuous improvement and emerging technologies including AI within the BA function
- Contribute to wider strategic and transformation initiatives outside core project allocation
- Deliver large-scale, international change programmes in a complex financial services environment
Requirements
- Strong business analysis experience across full SDLC
- Advanced Excel and basic SQL for analysis, investigation, and reporting
- Strong experience in financial markets products: bonds, derivatives, credit, securities financing, FX, loans, deposits
- Strong understanding of trade lifecycle and booking processes, ideally within Murex
- Strong Cyber Risk expertise with Identity & Access Management (IAM) and Privileged Access Management (PAM), including:
- identity lifecycle (joiner-mover-leaver)
- RBAC, least privilege, segregation of duties
- access provisioning, entitlements, certification/recertification
- PAM controls, privileged accounts, and exception handling
- IAM/PAM governance, audit evidence, and regulatory expectations (PRA, FCA, ECB, EBA)
- integration of IAM systems with directories, applications, and PAM tools
- zero-trust and identity-centric security principles
- Experience with RSA, ServiceNow, and CyberArk
- Experience delivering large-scale, international programmes in top-tier banking or consultancy environments
Package
- Up to 20% annual bonus
- London (Hybrid working)
