Position: IT Security Business Analyst, Krakow
Company: Luxoft
Category: Business Analyst
Experience required: 2y
English level: upper

Project Description
Security IT is a global organization delivering changes to the Security IT services Identity and Access Management, Data Protection and Application Security and Cyber Security Services.

We ensure:
• cooperation with a wide range of stakeholders (business and technical), worldwide
• you get familiar with all IT infrastructure technologies that are used in the bank (including those brand-new ones that are introduced - as all of them require privileged access management)
• ability to get experience with Privileged Access Management tools (mainly CyberArk but we have more in our PAM service offering)
• work in the IT security space which is always of very high importance and gets a lot of attention, especially in the banking industry

Responsibilities
- Analyse and define business and technical requirements for Privileged Access Management (PAM) systems, including requirements for establishing roles, entitlements and access definitions, on-boarding, and de-on-boarding processes using a variety of internal and external data and conducting stakeholder interviews,
- Determine the requirements of IT Security business solutions and assist in implementing them,
- Identify people and systems impacted by functional and non-functional requirements,
- Create and maintain project documentation (e.g. current state use cases document, Requirements Specification, End User Guide)
- Contribute information to IT Project/Program Manager regarding risks and issues,
- Align with both the Product Manager and Service Manager to ensure that the delivered solution is in line with the bank's strategy,
- Assist in quality control, user acceptance testing and project planning,
- Supporting engineering and test teams with their understanding of the requirements and the resolution of issues,
- Constantly be on the lookout for ways to improve monitoring, discover issues, and deliver better value to the customer,
- Evaluating existing processes and optimizing them in terms of efficiency and risk mitigation,
- Finding solutions to business problems as part of the overall strategic roadmap,
- Establish relationships with Technical, Business, and IT Risk Leaders in order to assist in the adoption of the Privileged Access Management program
- Work closely with the business along with various partners within the IT organization regarding Information Security,
- Stay abreast of information security and Privileged Access Management regulatory requirements and best practices.

Skills
Must have

Must have:
• minimum 2 years of experience in Business or System Analysis in IT Security or infrastructure-related projects,
• strong MSSQL knowledge, ability to write new and modify existing SQL queries,
• familiar with IT infrastructure area,
• various technologies and platforms, e.g. UNIX, Windows, Networks, Databases, Virtualization platforms, Cloud,
• IT infrastructure access/connection methods,
• accounts password management,
• ability to discuss requirements on a technical level (IT Infrastructure Engineers),
• ability to document workflows,
• excellent communication and stakeholder's management skills,
• ability to discuss and share requirements with a wide range of stakeholders (business and technical), e.g.:
• Program and Project Management
• Service and Product Management
• IT Risk representatives
• Platform Owners
• IT Infrastructure Engineers
• Business Analysts
• QA and On-boarding Teams.

- Strong written and verbal communication skills including technical writing skills
- The ability to interpret a set of technical requirements
- Ability to assist clients in reviewing the technical effectiveness of Privileged Access Management processes and controls
- An understanding of the software development lifecycle along with strong analytical, problem-solving, and synthesizing skills
- Good understanding of risk management principles and security controls
- Demonstrable security awareness, and understanding of security in the broad business context
- Experience applying business analysis techniques preferably in infrastructure or security projects
- Awareness of change management processes including development lifecycle (SDLC).

Nice to have

- As an advantage an industry best practice qualifications (e.g. CBAP, IREP)
- As an advantage an Information Security qualification (e.g. CISSP)
- As an advantage experience within either Identity & Access Management or Privileged Access Management security domains

Languages
English: C1 Advanced

Seniority
Senior



VR-68916