Senior Business Analyst (Cyber Security)

We want to maximise the potential of everyone who chooses to work for us. We offer a great work life balance. You have the opportunity to work at any of our brand-new Regional Centres and to also work remotely. Contracts vary in length dependent upon the project with the possibility to extend.

Your time spent with us short or long term will be invaluable - your skills and expertise are needed to deliver the largest digital and transformation projects in Government. There really couldn’t be a better time to join HMRC for your new contract opportunity!

Senior Business Analyst

Please note - you must hold active UK Government Security Clearance (SC) when applying for this position

Role Overview

Join HMRC as a Senior Business Analyst and play a pivotal role in supporting a major digital transformation programme. You will work at the intersection of business change, enterprise architecture, security and governance, helping to shape, define and validate business needs while ensuring alignment to organisational strategy, architecture principles and control frameworks.

A key aspect of this role will be translating complex technical, architectural and security requirements into clear business outcomes, establishing traceability between requirements, controls, risks, services and architecture artefacts. You will work closely with architects, security specialists and senior stakeholders to ensure solutions are aligned to enterprise standards and recognised frameworks, including industry standards such as NIST.

This role combines strong analytical capability, stakeholder management and technical awareness, requiring excellent communication skills to bridge the gap between business and technical teams across a complex delivery environment.

Essential Criteria

• Proven experience leading business analysis on complex, cross-cutting change initiatives involving strategy, operating models, governance and technology-enabled transformation.
• Understanding of enterprise architecture concepts, principles, repositories and modelling approaches, with the ability to align business requirements to architectural outcomes.
• Experience working with security, risk and controls frameworks, including the mapping of business requirements, controls and services to recognised standards (e.g. NIST or equivalent frameworks).
• Demonstrable experience establishing traceability across requirements, risks, controls, services and architectural components to support informed decision-making and governance.
• Strong stakeholder leadership skills, including workshop facilitation, influencing senior stakeholders, resolving conflict, driving decisions and managing ambiguity.
• Ability to translate complex security, architecture and technical inputs into clear recommendations, roadmaps and decision papers for senior audiences.
• Comfortable operating in a fast-paced environment and able to quickly understand complex domains and deliver value from day one.

Desirable Criteria

• Experience supporting cyber security, risk management or governance-related transformation programmes.
• Familiarity with architecture tooling and repositories used to manage enterprise architecture and business capability models.
• Previous experience working within government, regulated environments or large-scale transformation programmes.

Our Values

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, colour, national origin, sex, gender, gender expression, sexual orientation, age, marital status or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact your designated recruiter to request accommodation.