Business Analyst – IDAM / Cyber Security

About the role

We are seeking an experienced Business Analyst with strong knowledge of Identity and Access Management (IDAM) and cyber security to support enterprise identity transformation and security initiatives. The successful candidate will work closely with business stakeholders, cyber security teams, solution architects, infrastructure teams and application owners to gather requirements and deliver secure identity and access management solutions. The role will focus on Single Sign-On (SSO), Microsoft Entra ID (formerly Azure Active Directory), Active Directory (AD), identity lifecycle management and access governance.

Key responsibilities

• Gather, analyse and document business, functional and non-functional requirements for IDAM and cyber security initiatives.

• Work with stakeholders to define current-state and future-state identity and access management processes.

• Support the implementation and enhancement of SSO and authentication solutions using Microsoft Entra ID and Active Directory.

• Document application integration requirements, authentication flows and identity federation requirements.

• Analyse user provisioning and de-provisioning processes, including Joiner, Mover and Leaver (JML) workflows.

• Define access request, approval, role-based access control (RBAC) and access review requirements.

• Collaborate with technical teams on Multi-Factor Authentication (MFA), Conditional Access and identity security controls.

• Support application onboarding and integration with enterprise identity platforms.

• Conduct stakeholder workshops, gap analysis, process mapping and impact assessments.

• Develop business requirements documents (BRDs), functional specifications, user stories, acceptance criteria and process flows.

About you

• Proven experience as a Business Analyst in Identity and Access Management (IAM/IDAM), cyber security or enterprise technology transformation.

• Strong understanding of Microsoft Entra ID (Azure AD) and Active Directory.

• Experience with Single Sign-On (SSO), Multi-Factor Authentication (MFA) and identity federation.

• Knowledge of authentication protocols such as SAML 2.0, OAuth 2.0 and OpenID Connect (OIDC).

• Understanding of identity lifecycle management, user provisioning, de-provisioning and access governance.

• Knowledge of RBAC, access approvals, entitlement management and periodic access reviews.

• Experience gathering requirements and translating business needs into functional specifications and user stories.

• Strong stakeholder management, workshop facilitation, analytical and documentation skills.

• Experience supporting SIT, UAT, defect management and implementation activities.

• Familiarity with Agile delivery methodologies and tools such as Jira, Confluence, Visio and Microsoft Excel.