Security Technical Business Analyst (CIS Controls) - 6 months - Hybrid in London - Inside IR35

Role Overview

We are looking for a Security Technical Business Analyst to join on a 6-month contract based in London (4 days on-site). The role sits within a large security programme focused on mapping and closing identified security gaps against the CIS Controls framework, working closely across engineering, business, and information security teams to drive measurable risk reduction within defined timelines.

Key Responsibilities

• Lead the technical assessment of existing security gaps, mapping and prioritising CIS controls implementation across the enterprise and aligning identified gaps with regulatory requirements
• Perform gap analysis and maturity assessments against CIS controls, defining control ownership, industry standards, and Definition of Done for each identified gap or control mapping
• Work with technical teams and stakeholders to translate security gaps into applicable CIS controls, conducting periodic assurance to ensure technical teams are delivering against requirements
• Coordinate with cross-functional teams for dependency and risk management, and support operationalisation of deployed controls and handover to BAU teams
• Provide support to internal and external audits and assist with wider security activities and projects as required

Top 5 Skills

• 7-10 years of experience in security roles spanning GRC, controls implementation and testing, security engineering, and infrastructure
• 3+ years of hands-on experience implementing CIS controls in large enterprise environments, with strong technical depth across security assurance and controls
• Strong knowledge of cloud security controls and the ability to map technical gaps across hybrid and cloud-native environments
• Excellent communication and stakeholder management skills, with the ability to translate complex technical findings for both engineering teams and business leadership
• Industry standard security certifications, strong analytical and problem-solving skills, and the ability to manage competing priorities under pressure - desirable: exposure to retail domain environments

Contract

• Rate: £525 - £550 per day Inside IR35
• Location: London (4x a week)
• Duration: Initial 6 months