IT Security Business Analyst

Luxoft Poland
Online interview
B2B Employment contract
Krakow Wrocław

Project description

Security IT is a global organization delivering changes to the Security IT services Identity and Access Management, Data Protection and Application Security and Cyber Security Services.

We ensure:

  • cooperation with a wide range of stakeholders (business and technical), worldwide
  • you get familiar with all IT infrastructure technologies that are used in the bank (including those brand-new ones that are introduced - as all of them require privileged access management)
  • ability to get experience with Privileged Access Management tools (mainly CyberArk but we have more in our PAM service offering)
  • work in the IT security space which is always of very high importance and gets a lot of attention, especially in the banking industry

Your tasks

  • Analyse and define business and technical requirements for Privileged Access Management (PAM) systems, including requirements for establishing roles, entitlements and access definitions, on-boarding, and de-on-boarding processes using a variety of internal and external data and conducting stakeholder interviews,
  • Determine the requirements of IT Security business solutions and assist in implementing them,
  • Identify people and systems impacted by functional and non-functional requirements,
  • Create and maintain project documentation (e.g. current state use cases document, Requirements Specification, End User Guide)
  • Contribute information to IT Project/Program Manager regarding risks and issues,
  • Align with both the Product Manager and Service Manager to ensure that the delivered solution is in line with the bank's strategy,
  • Assist in quality control, user acceptance testing and project planning,
  • Supporting engineering and test teams with their understanding of the requirements and the resolution of issues,
  • Constantly be on the lookout for ways to improve monitoring, discover issues, and deliver better value to the customer,
  • Evaluating existing processes and optimizing them in terms of efficiency and risk mitigation,
  • Finding solutions to business problems as part of the overall strategic roadmap,
  • Establish relationships with Technical, Business, and IT Risk Leaders in order to assist in the adoption of the Privileged Access Management program
  • Work closely with the business along with various partners within the IT organization regarding Information Security,
  • Stay abreast of information security and Privileged Access Management regulatory requirements and best practices.

Who we're looking for?


Must have:

  • minimum 2 years of experience in Business or System Analysis in IT Security or infrastructure-related projects,
  • strong MSSQL knowledge, ability to write new and modify existing SQL queries,
  • familiar with IT infrastructure area,
  • various technologies and platforms, e.g. UNIX, Windows, Networks, Databases, Virtualization platforms, Cloud,
  • IT infrastructure access/connection methods,
  • accounts password management,
  • ability to discuss requirements on a technical level (IT Infrastructure Engineers),
  • ability to document workflows,
  • excellent communication and stakeholder's management skills,
  • ability to discuss and share requirements with a wide range of stakeholders (business and technical), e.g.:
  • Program and Project Management
  • Service and Product Management
  • IT Risk representatives
  • Platform Owners
  • IT Infrastructure Engineers
  • Business Analysts
  • QA and On-boarding Teams.

  • Strong written and verbal communication skills including technical writing skills

  • The ability to interpret a set of technical requirements
  • Ability to assist clients in reviewing the technical effectiveness of Privileged Access Management processes and controls
  • An understanding of the software development lifecycle along with strong analytical, problem-solving, and synthesizing skills
  • Good understanding of risk management principles and security controls
  • Demonstrable security awareness, and understanding of security in the broad business context
  • Experience applying business analysis techniques preferably in infrastructure or security projects
  • Awareness of change management processes including development lifecycle (SDLC).
  • As an advantage an industry best practice qualifications (e.g. CBAP, IREP)
  • As an advantage an Information Security qualification (e.g. CISSP)
  • As an advantage experience within either Identity & Access Management or Privileged Access Management security domains

Our company

Luxoft Poland

Krakow, Wrocław, Warsaw, Gdańsk 1500
Tech skills
  • Java
  • JavaScript
  • C++
  • C#
  • Python
  • Scala
  • Android
  • Android
  • iOS
  • Go

Check out similar job offers