Security Business Analyst

Security Technical Business Analyst - Retail

6 Month Contract

Inside IR35

£500 p/d

London based - 4 days per week in office 1 day remote

Lead the assessment, analysis, and remediation of enterprise security control gaps against the CIS Controls framework, translating technical security requirements into actionable delivery plans, coordinating stakeholders, driving control implementation, assurance, audit readiness, and operational handover to improve security maturity and compliance.

Key Responsibilities:

* Conduct CIS Controls gap and maturity assessments

* Map security gaps against regulatory and compliance requirements

* Define control ownership, standards and acceptance criteria

* Work closely with technical teams to ensure successful control implementation

* Perform assurance reviews and track delivery against requirements

* Support risk, dependency and stakeholder management across multiple workstreams

* Assist with audits and transition controls into BAU operations

Requirements:

Strong experience across Security, GRC, Controls, Engineering or Infrastructure

Proven background implementing CIS Controls within large enterprise environments

Excellent understanding of security assurance, controls testing and governance

Knowledge of cloud security controls

Excellent stakeholder management and communication skills

Relevant security certifications preferred

Desirable

* Retail sector experience

* Strong analytical and problem-solving abilities

* Experience working in complex, fast-paced environments