Medior Business Analyst – Cybersecurity & NIS2 Compliance Job ID JP054280

We are looking for a Medior Business Analyst to support the preparation phase of a NIS2 compliance program. The role focuses on application access governance role modeling access recertification and collaboration between business and technical teams to strengthen identity and access management practices.

• Inventory and map business applications and document their authorization models
• Coordinate with application owners to collect validate and consolidate access-related information into a central repository
• Facilitate and lead workshops with business stakeholders to define and model access roles
• Produce coherent and validated RBAC (Role-Based Access Control) models
• Conduct access recertification activities and support Least Privilege implementation
• Create audit-ready evidence and documentation for NIS2 compliance requirements
• Define and document business access profiles including privileged access requirements
• Ensure compliance with segregation of duties (SoD) and Least Privilege principles
• Act as the liaison between business teams and technical teams implementing access controls
• Support the translation of business roles into operational solutions such as IGA PAM PIM and Bastion platforms
• Perform quality control and ensure consistency across governance deliverables

• Strong Business Analysis experience
• Knowledge of Identity and Access Management (IAM) concepts
• Experience with RBAC/ABAC models
• Understanding of Active Directory environments
• Familiarity with IGA PAM PIM and Bastion solutions
• Knowledge of CMDB and application inventory management
• Understanding of cybersecurity governance and compliance frameworks
• Good analytical documentation and stakeholder management skills
• SQL knowledge is an advantage
• Ability to work independently and collaboratively in large organizations

• Experience in cybersecurity or identity governance projects
• Experience in large enterprise environments (8000 employees)
• Experience in public transportation or regulated industries is an asset
• ISO 27001 Foundation certification is an advantage
• CIAM and/or CAMS certifications are considered a plus

• French or Dutch: Native/Bilingual proficiency
• English: Professional working proficiency

• Hybrid working model
• On-site presence required 23 days per week
• Long-term mission with potential extensions
• Location: Brussels