About this role
Cyber Risk Business Analyst (IAM)
Location: London (4 days onsite) Rate: £625-650 per day (Inside IR35)
emagine is a high-end professional services consultancy and solutions firm specialising in delivering business and technology services to the financial services sector. We power progress, solve complex challenges, and deliver tangible results through tailored consulting and delivery excellence.
Our culture is built on openness, integrity, and strong partnerships, underpinned by our core values: Confident, Dedicated, Responsible, Genuine.
We are seeking a Cyber Risk Business Analyst with strong Identity & Access Management (IAM) expertise to support a high-profile programme focused on access governance, remediation, and IAM framework delivery.
This role will sit at the intersection of cyber risk, IAM engineering, and business stakeholders, driving the definition and delivery of secure, compliant access management solutions within a complex financial services environment.
Key Responsibilities
Business Analysis & Delivery
Lead requirements gathering and produce high-quality Business Requirements Documents (BRDs) and Functional Specifications
Deliver full end-to-end Business Analysis across the project lifecycle, including:
Solution design and stakeholder presentations (including data-led insights)
Test strategy, test plans, and test case development
System and integration testing
Supporting and coordinating User Acceptance Testing (UAT)
Test result analysis and reporting
Produce project status updates, tracking progress, risks, and dependencies
Proactively identify and escalate risks and issues
IAM & Cyber Risk Focus
Drive analysis and delivery across Identity & Access Management (IAM) initiatives, including:
Access governance and account remediation
Role modelling, entitlements, and access reviews
Segregation of Duties (SoD) and toxic combinations
Work with application owners to define and document roles, permissions, and access models
Support delivery of IAM solutions aligned to regulatory and audit requirements
Contribute to the development and implementation of IAM frameworks, controls, and operating models
Stakeholder Engagement
Act as a key liaison between Cyber Risk, IAM Engineering, Technology, and Business teams
Facilitate workshops with SMEs to define requirements and validate solutions
Translate complex technical and access-related concepts into business-friendly language
Build strong stakeholder relationships to ensure effective delivery across the change portfolio
Technical & Analytical
Apply strong analytical skills to investigate issues and provide evidence-based recommendations
Perform SQL queries and data analysis where required
Use advanced Excel for data validation, reporting, and modelling
Support solution decisions with a solid understanding of IAM tools and vendor landscape
Key Requirements
Strong Business Analyst experience within:
IAM, Cybersecurity, or Technology Change programmes
Deep understanding of Identity & Access Management concepts, including:
RBAC (Role-Based Access Control)
Least privilege
Segregation of Duties (SoD)
Access certification and remediation
Proven experience working with application owners to define roles and permissions
Experience delivering IAM solutions in complex, regulated environments
Strong knowledge of access management frameworks and compliance standards (e.g., EBA-ICT, NIST, FCA, COBIT, FFIEC)
Experience in framework development and implementation
Excellent stakeholder management, communication, and facilitation skills
Strong analytical and problem-solving capabilities
The ideal consultants will share our values and be aligned with our ways of working and as your career progresses, you can expect to work across all areas of the project lifecycle, from strategy to implementation. This will provide you with a broad base of experience from which to build an outstanding career.
The ideal consultants will share our values and be aligned with our ways of working and as your career progresses, you can expect to work across all areas of the project lifecycle.
We pride ourselves on;
Providing our people with a supportive culture, rooted in our values and driven by our purpose.
Promoting a culture of inclusion, collaboration, well-being, and learning and development.
Providing increased agility and flexibility within our hybrid working model
Investing in employees’ growth through ongoing training and development
Autonomy to take ownership of projects, making decisions and demonstrating individual expertise
Providing an transparent performance and career management experience.
Our consultants are integral to delivering successful consulting engagements, addressing our clients’ most pressing business challenges, and build lasting value in disciplines such as:
Solve sophisticated, ambiguous business, change and technology problems, bringing structure and meticulous analysis and planning, acting, and taking decisions with little strategic direction
Build, develop and sustain trusted senior client relationships in the C-suite by remaining highly attuned to client needs
Drive, enable and support the business, partnering with our leaders, clients, and consultants across our practices to take the best of emagine to our clients through opportunity identification/qualification, solution development/presentation