FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in requirements elicitation, process analysis, and translating cybersecurity concepts into business requirements. Proficient in managing the requirements lifecycle and facilitating stakeholder engagement across diverse domains.
Highest-signal resume keywords
Requirements ElicitationProcess AnalysisWorkshop FacilitationCybersecurity Concepts TranslationNIST CSF Awareness
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Business AnalysisTraceabilityOperational ReadinessRFP RequirementsData AnalysisProcess MappingTestable RequirementsDecision PapersUser StoriesSecurity Operations
Soft Skills
Stakeholder EngagementConflict ResolutionFacilitationCommunicationDecision-Making
Tools & Technologies
SIEMIAMMFASSOActive DirectoryAPI SecurityCloud SecurityEndpoint SecurityPKI ManagementIncident Readiness
Certifications & Qualifications
Recognised Role Certification
Industry Keywords
CybersecurityRisk ManagementComplianceISO 27001CIS ControlsITILData SecurityPrivacySupply Chain RiskOperationalisation
Tech Stack
Tools & technologiesCloudCyber SecurityIoT
About the role
Key responsibilities & impact- Lead structured discovery across business, cybersecurity, technology, risk, legal, privacy, procurement, and operations stakeholders
- Define the problem, value hypothesis, scope, outcomes, constraints, and measurable acceptance criteria
- Elicit, analyse, reconcile, and baseline business, functional, non-functional, security, privacy, regulatory, operational, and reporting requirements
- Use interviews, workshops, observation, document analysis, process mapping, and data analysis
- Translate cyber risks, threat scenarios, control objectives, and technical constraints into business language and delivery artefacts
- Produce decision papers, epics, user stories, use cases, process and data models, traceability matrices, and testable requirements
- Own requirements quality and lifecycle, including versioning, prioritisation, change control, impact assessment, and traceability
- Track requirements from original need through design, build, testing, deployment, control evidence, and benefits realisation
- Produce or coordinate programme artefacts including demand inputs, business requirements, product descriptions, current- and future-state processes, stakeholder maps, RACI, data definitions, acceptance criteria, decision logs, and readiness assessments
- Partner with security architects and subject-matter experts across cybersecurity domains
- Plan and facilitate workshops, playback sessions, design reviews, and sign-off forums
- Identify assumptions, conflicts, gaps, and dependencies and drive them toward explicit decisions
- Support sourcing and supplier engagement by defining outcome-based requirements, evaluation criteria, use cases, service levels, security obligations, evidence expectations, and RFP clarification responses
Requirements
What you’ll need- Proven senior-level business analysis experience in complex cybersecurity, technology, risk, or compliance change
- Expertise in requirements elicitation, process analysis, traceability, workshop facilitation, testing, and operational readiness
- Ability to translate cybersecurity, risk, and technical concepts into business requirements and decisions
- Experience with RFP requirements, suppliers, global stakeholders, and hybrid delivery
- Relevant degree or equivalent experience
- Broad awareness of NIST CSF, ISO 27001, CIS Controls, and ITIL
- Awareness of secure delivery practices
- Experience or exposure to identity governance and administration, IAM, MFA, and SSO
- Experience or exposure to privileged access management and Active Directory security
- Experience or exposure to security operations, logging, SIEM, SOC integration, and incident readiness
- Experience or exposure to vulnerability, exposure, and external attack-surface management
- Experience or exposure to application, API, web, and cloud security
- Experience or exposure to infrastructure, endpoint, network, PKI, and certificate management
- Experience or exposure to data security, privacy, cryptography, and information protection
- Experience or exposure to cyber resilience, backup, recovery, crisis readiness, and continuity
- Experience or exposure to OT/IoT and logistics-site security
- Experience or exposure to third-party, supply-chain, M&A, and regulatory cyber risk
- Experience or exposure to security governance, control frameworks, audit, and compliance
- Experience or exposure to operationalisation, service management, and continuous control improvement
- A recognised role certification is preferred
Benefits
Comp & perks- 100% remote work
- Occasional business trips
- Full-time employment