Our client is seeking a contract based Senior Business Analyst with a strong background in IT Security to support the review, assessment, and optimization of Security Operations Centre (SOC) processes and supporting technologies.

Working closely with security, technology, and business stakeholders, the consultant will analyze current security operations, identify process improvements, assess supporting enterprise and cloud platforms, and develop recommendations that strengthen operational effectiveness, governance, risk management, and compliance

. Location: Hybrid Otta waDuration: 12 mont

hs Responsibilit iesReview and document current-state Security Operations Centre (SOC) processes, workflows, and operating procedur es.Analyze security operations to identify inefficiencies, process gaps, operational risks, and improvement opportuniti es.Facilitate workshops with cybersecurity, infrastructure, and business stakeholders to gather requirements and validate recommendatio ns.Assess enterprise systems, SaaS applications, and cloud platforms to identify security, governance, and control ga ps.Develop future-state business processes and operating models that improve the effectiveness of security operatio ns.Support the continuous improvement of governance, risk, and compliance (GRC) practices across the organizati on.Evaluate existing security processes and recommend improvements aligned with cybersecurity best practices and industry framewor ks.Produce business requirements, process maps, workflow documentation, gap analyses, recommendations, and executive-level reporti ng.Analyze operational data and performance metrics to identify trends and opportunities for optimizati on.Support implementation planning and change management activities for approved improvemen

ts. Required Qualificat ions8+ years of experience as a Business Analyst on enterprise technology initiati ves.Demonstrated experience supporting IT Security or Cybersecurity initiati ves.Experience reviewing and improving Security Operations Centre (SOC) processes and operating mod els.Strong understanding of cybersecurity operations, governance, risk management, and compliance princip les.Experience conducting current-state assessments, business process analysis, and gap analy ses.Experience documenting business requirements, workflows, and future-state proces ses.Knowledge of enterprise applications, SaaS solutions, and cloud environments from a security and governance perspect

ive. Preferred Qualifica tionsExperience with one or more of the following is considered an a sset:Security Operations Centre (SOC) moderniz ationSIEM platforms (e.g., Microsoft Sentinel, Splunk, QR adar)Security orchestration and automation ( SOAR)Identity and Access Management (IAM)Vulnerability Manag ementCloud security (Azure, AWS, Microsoft 365)GRC platforms and governance frame worksNIST Cybersecurity Fram eworkISO 27001CIS Con trol

sITIL