Project manager Business Analyst 9 months contract Fully Remote

Project manager/ Business Analyst

Up to 600 per day - Inside IR35

9 months contract - Fully Remote

We are looking for a Cyber Security Project Manager / Business Analyst to lead and coordinate multiple security workstreams across risk controls and engineering domains.

This role will focus on driving delivery across control framework alignment (NIST) KRI measurement and security tooling implementation ensuring clear governance stakeholder alignment and measurable risk reduction.

Key Responsibilities

Project Delivery & Governance

• Lead end-to-end delivery of cyber security initiatives across control risk and engineering workstreams

• Define project scope timelines deliverables and success metrics

• Establish and maintain strong governance reporting and documentation standards

• Track progress against milestones risks and dependencies

Business Analysis & Requirements

• Conduct gap analysis across existing controls vs. target frameworks (e.g. NIST internal/Tier 1-aligned standards)

• Translate business and regulatory requirements into clear technical and operational deliverables

• Define and document requirements for control implementation tooling and process improvements

• Work closely with SMEs across risk security engineering and infrastructure

Risk Controls & KRI Alignment

• Support alignment of security controls to Key Risk Indicators (KRIs) and enterprise risk frameworks

• Measure and report on control effectiveness against defined risk indicators

• Help prioritise remediation efforts based on risk exposure and business impact

• Ensure initiatives drive sustainable and auditable improvements in security posture

Stakeholder Management

• Engage senior stakeholders across security IT and the business

• Act as the central coordination point between risk engineering and governance teams

• Facilitate workshops drive decision-making and remove delivery blockers

• Present clear commercially focused updates to leadership

Delivery Across Key Security Domains

• Support programmes across:

  • Control framework adoption (NIST / internal standards)

  • Microsoft Security stack (Defender E5 CSPM tooling)

  • Network security initiatives (NTA NetSec reviews detection improvements)

• Ensure alignment between technical implementation and risk/compliance objectives

Key Experience

• Proven experience as a Project Manager and/or Business Analyst within Cyber Security programmes

• Strong understanding of cyber security frameworks (NIST ideally)

• Experience delivering control framework alignment and gap remediation programmes

• Background in risk governance and KRI-driven environments

• Experience working across security engineering infrastructure and risk teams

• Strong documentation requirements gathering and stakeholder management skills

• Ability to translate complex security concepts into clear delivery plans and outcomes

Desirable

• Experience within financial services or regulated environments

• Exposure to Microsoft security ecosystem (Defender M365 E5)

• Understanding of network security concepts (NTA traffic analysis NetSec controls)

• Familiarity with audit compliance and regulatory requirements