IT Security Business Analyst

Security IT is a global organization delivering changes to the Security IT services Identity and Access Management, Data Protection and Application Security and Cyber Security Services.

We ensure:

• cooperation with a wide range of stakeholders (business and technical), worldwide
• you get familiar with all IT infrastructure technologies that are used in the bank (including those brand-new ones that are introduced - as all of them require privileged access management)
• ability to get experience with Privileged Access Management tools (mainly CyberArk but we have more in our PAM service offering)
• work in the IT security space which is always of very high importance and gets a lot of attention, especially in the banking industry

• Analyse and define business and technical requirements for Privileged Access Management (PAM) systems, including requirements for establishing roles, entitlements and access definitions, on-boarding, and de-on-boarding processes using a variety of internal and external data and conducting stakeholder interviews,
• Determine the requirements of IT Security business solutions and assist in implementing them,
• Identify people and systems impacted by functional and non-functional requirements,
• Create and maintain project documentation (e.g. current state use cases document, Requirements Specification, End User Guide)
• Contribute information to IT Project/Program Manager regarding risks and issues,
• Align with both the Product Manager and Service Manager to ensure that the delivered solution is in line with the bank's strategy,
• Assist in quality control, user acceptance testing and project planning,
• Supporting engineering and test teams with their understanding of the requirements and the resolution of issues,
• Constantly be on the lookout for ways to improve monitoring, discover issues, and deliver better value to the customer,
• Evaluating existing processes and optimizing them in terms of efficiency and risk mitigation,
• Finding solutions to business problems as part of the overall strategic roadmap,
• Establish relationships with Technical, Business, and IT Risk Leaders in order to assist in the adoption of the Privileged Access Management program
• Work closely with the business along with various partners within the IT organization regarding Information Security,
• Stay abreast of information security and Privileged Access Management regulatory requirements and best practices.

Must have:

• minimum 2 years of experience in Business or System Analysis in IT Security or infrastructure-related projects,
• strong MSSQL knowledge, ability to write new and modify existing SQL queries,
• familiar with IT infrastructure area,
• various technologies and platforms, e.g. UNIX, Windows, Networks, Databases, Virtualization platforms, Cloud,
• IT infrastructure access/connection methods,
• accounts password management,
• ability to discuss requirements on a technical level (IT Infrastructure Engineers),
• ability to document workflows,
• excellent communication and stakeholder's management skills,
• ability to discuss and share requirements with a wide range of stakeholders (business and technical), e.g.:
• Program and Project Management
• Service and Product Management
• IT Risk representatives
• Platform Owners
• IT Infrastructure Engineers
• Business Analysts

• QA and On-boarding Teams.

• Strong written and verbal communication skills including technical writing skills

• The ability to interpret a set of technical requirements
• Ability to assist clients in reviewing the technical effectiveness of Privileged Access Management processes and controls
• An understanding of the software development lifecycle along with strong analytical, problem-solving, and synthesizing skills
• Good understanding of risk management principles and security controls
• Demonstrable security awareness, and understanding of security in the broad business context
• Experience applying business analysis techniques preferably in infrastructure or security projects
• Awareness of change management processes including development lifecycle (SDLC).

• As an advantage an industry best practice qualifications (e.g. CBAP, IREP)
• As an advantage an Information Security qualification (e.g. CISSP)
• As an advantage experience within either Identity & Access Management or Privileged Access Management security domains

• Competitive salary
• Luxoft Training Center
• Access to e-learning Library
• Individual development plans
• Long-term cooperation with possibility to gain experience in different projects and technologies
• A significant number of professional communities (Agile Community, Tech Community, Business Analysis Community, etc.)

• Group Life Insurance
• Private healthcare insurance – LuxMed. Unlimited access to specialist consultations with Dental Care included
• Medical costs reimbursement for employees (up to certain amount per quarter)
• Travel Insurance
• Benefit Program - Cafeteria and Multisport Card

• Various communities (sport, recreation activities, trips, board games, cultural and educational activities)
• Discounts program for employees – BeLux (banking offer, car leasing offer and cafeteria program discount)
• Convenient locations in a modern offices with game rooms
• Multinational projects for clients all over the world