> Markdown version of [/jobs/ext/4534982-security-business-analyst](https://www.wearedevelopers.com/jobs/ext/4534982-security-business-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Business Analyst

- **Company:** Barclay Simpson
- **Location:** Cambridge, UK (Remote available)
- **Experience:** Expert
- **Salary:** £130,000.0 - £156,000.0
- **Contract:** Permanent contract
- **Skills:** Software System Penetration Testing, Cloud Computing Security, Cyber Security, Red Team (Cyber Security), Private Cloud Environment, Devsecops
- **Published:** November 3, 2026
- **Apply:** https://www.barclaysimpson.com/job/jem-44865/security-business-analyst/

## About the Role

* Strong Cyber Security/Exposure/Security Assurance BA experience.
 * Experience translating security capabilities into requirements, processes, operating models, RACIs and outcomes.
 * Good technical understanding of TVM, attack surface, configuration, endpoint and cloud security.
 * Working knowledge of SSDLC, DevSecOps and security tooling - technically credible without needing to be the deep technical SME.
 * Strong requirements and process engineering, including independently facilitating SME workshops and defining current/future-state processes.
 * Experience designing cross-functional security processes, dependencies, hand-offs, ownership and escalation paths.
 * Ability to assess capability maturity, gaps, priorities and integrations to support an effective Exposure Management roadmap.
 * CTEM knowledge is highly desirable.

## Description

Technical Security Business Analyst required to translate technical SME input across Cyber Exposure/TVM domains into clear capabilities, requirements, processes, operating models, RACIs and measurable outcomes.