The Role
The Business Analyst will be responsible for gathering, analysing, and documenting business requirements, driving process improvements, and supporting end-to-end delivery across projects.
The role will also involve supporting Cyber Security-related initiatives by aligning business processes with security policies, risk frameworks, and regulatory requirements
Your responsibilities:
Gather, analyse, and document business and functional requirements across projects
Facilitate stakeholder workshops and drive requirement elicitation and sign-off
Create user stories, acceptance criteria, and functional design documentation
Analyse current processes and identify opportunities for optimisation and transformation
Ensure end-to-end traceability of requirements across design, development, and testing
Act as a bridge between business stakeholders and technical delivery teams
Support Agile delivery through backlog grooming, sprint planning, and UAT
Translate cyber security requirements into business and functional specifications
Support security risk assessments, compliance checks, and audit readiness activities
Ensure alignment of solutions with data privacy, regulatory, and security standards
Essential skills/knowledge/experience:
Strong experience in business analysis across complex transformation initiatives
Expertise in requirements elicitation, documentation, and stakeholder management
Proven ability to create user stories, acceptance criteria, and functional specifications
Strong understanding of Agile/Scrum and end-to-end delivery lifecycle
Experience in process mapping and business process improvement (BPMN or similar)
Excellent analytical, problem-solving, and data interpretation skills
Ability to bridge business and technical teams with clear communication
Working knowledge of Cyber Security principles, risk, and compliance concepts
Understanding of data privacy regulations (e.g., GDPR) and security governance
Experience supporting risk assessments, audits, or security-aligned delivery
Desirable skills/knowledge/experience:
Experience supporting data governance, data privacy, and customer data protection initiatives (GDPR
Familiarity with risk, audit, and compliance processes within regulated environments
Exposure to Cyber Security initiatives within critical infrastructure or utilities
Experience working on business transformation or digital programmes within utilities sector
Understanding of incident management, service resilience, and business continuity processes
Experience in stakeholder management across business, IT, and risk/compliance teams
