Senior Security Business Analyst Data Security & Governance

Digital Data Consultancy Limited is seeking an experienced Senior Security Business Analyst to support a UK-based organisation on a Data Discovery and Data Security Assessment engagement.

Experience: 10+ Years

Engagement: Contractual / Project-Based Consultancy

Compensation: 2,00,000 per month

Location/Working Arrangement: To be agreed, including any required onsite attendance.

Key Responsibilities

- Lead/support discovery workshops, stakeholder interviews and requirements-gathering sessions.
- Gather and document business, data, technical, security and compliance requirements.
- Translate business risks and security concerns into structured and actionable requirements.
- Document data sources, business processes, data flows, ownership, access permissions and CRUD responsibilities.
- Review the current data-security architecture and control environment.
- Identify security/control gaps, inconsistent processes, unclear responsibilities and areas requiring further investigation.
- Support data-security maturity assessment and preparation of risk registers.
- Analyse regulatory/security requirements including UK GDPR, Data Protection Act 2018, ISO 27001, NIS2 and relevant aviation-security requirements.
- Prepare requirements catalogues, process diagrams, stakeholder matrices, gap assessments and supporting evidence.
- Contribute to the Data Security Baseline Review and development of prioritised security improvement recommendations.
- Present findings to business and technical stakeholders.

These responsibilities closely follow the attached JD's discovery, requirements, data/process discovery and security maturity responsibilities.

Essential Requirements





- Minimum 10 years of relevant skilled experience.
- Strong experience as a Business Analyst / Security Business Analyst / Cybersecurity Analyst / Data Governance Business Analyst.
- Experience in cybersecurity, data protection and information-governance requirements.
- Strong understanding of information security, access control, identity management, encryption, audit logging, network security, data protection and incident management.
- Working knowledge of UK GDPR, Data Protection Act 2018 and ISO 27001.
- Strong requirements elicitation, current-state analysis, process modelling and data-flow documentation skills.
- Experience preparing requirements catalogues, RACI/CRUD matrices, risk registers and gap assessments.
- Excellent stakeholder management, workshop facilitation and communication skills.

The original JD specifies these capabilities, although its original minimum experience requirement is five years; 10+ years is your revised requirement for this posting.

Desirable

- Experience in aviation, airports, transport, critical national infrastructure or another regulated sector.
- Knowledge of NIS2, aviation cybersecurity and CAP 1753.
- Experience with data discovery, data cataloguing, metadata management and data-governance programmes.
- Familiarity with Azure, Microsoft 365, databases, data lakes and SaaS applications.
- Certifications such as BCS Business Analysis, CBAP/CCBA, CISSP, CISM, CompTIA Security+ or ISO 27001 are desirable.

Additional Requirement: Background Security Check required. The attached JD describes the delivery model as a project-based consultancy assignment and states that the working arrangement will be agreed with DDC and LLA, including any onsite attendance.

📌 Senior Security Business Analyst _ Data Security & Governance (Kolkata)
🏢 Digital Data Consultancy (UK)
📍 Kolkata