Tech Business Analyst - Cybersecurity / Security Controls

NOT LOOKING FOR SECURITY ENGINEERS / SECURITY SPECIALISTMUST HAVE at least 5 years experience as a Business Analysts & 3+ years hands-on experience on security-focused projects / Information Security (Infosec) / Cybersecurity / Security Controls specifically Salary: R25 000 - R35 000 per month12 Months Contract (Renewal - 3 year programme)🚨 Minimum Requirements✔ 5+ years' experience as a Business Analyst within large-scale enterprise transformation programmes✔MUST HAVE at least 3-5 years hands-on experience on cybersecurity-focused projects / Information Security (Infosec) / Cybersecurity / SecOps specifically If cybersecurity or any security related projects not mentioned in profile or CV - you will automatically be rejected (we need to see mentions of security in CV)✔ Working knowledge of information security principles, technology risk and security controls, with the ability to understand and translate security requirements into clear delivery requirements.✔ Familiarity with information security frameworks, standards such as ISO/IEC 27001 and NIST CSF Role PurposeThe Security Business Analyst supports the TRANSFORM Security Workstream by translating information security requirements into clear, documented and traceable business and technical requirements across accelerated remediation, hypercare and Release 3.The role maintains traceability between security risks, control requirements, remediation actions, delivery requirements and supporting evidence, working with Group Information Security SMEs, TRANSFORM, business stakeholders and delivery partners throughout the delivery lifecycle.What You'll Be DoingGather, analyse and document security requirements.Translate security requirements into clear business, functional and technical requirements in collaboration with security SMEs.Facilitate requirements workshops with relevant stakeholders.Define and maintain acceptance criteria and evidence requirements.Maintain end-to-end traceability between risks, controls, requirements, remediation actions and evidence.Maintain accurate action ownership, milestones, dependencies and supporting documentation.Maintain appropriate decision and requirements records.Support the Security Delivery Manager in maintaining the integrated security remediation plan.Identify gaps, inconsistencies and dependencies requiring resolution.Track evidence submissions and ensure they are mapped to the appropriate requirement/control before assurance.Support preparation of workstream reporting and governance materials.Ensure security requirements are identified early in the Release 3 lifecycle.Maintain requirements traceability through design, build, testing and implementation.Support security SMEs in confirming that requirements have been addressed by proposed designs and delivered solutions.