Join EY and build a career that's as unique as you are. We offer global scale, support, an inclusive culture, and the technology needed to help you become your best. Your perspective is valuable in helping EY achieve even greater heights. Contribute to building an exceptional experience for yourself and a better working world for everyone.

The Senior Information Security Business Analyst plays a crucial role within the Enterprise Security Program, ensuring security initiatives are effectively supported. This position focuses on accurately capturing, documenting, communicating, and managing business and security requirements. You will collaborate with project stakeholders and Information Security Services to assess needs, propose solutions, and facilitate implementation agreements. As a subject matter expert, you will provide actionable insights to support informed decision-making and risk mitigation.

As part of the Information Security Service Delivery team, the Senior Security Business Analyst drives business process improvements through methodical investigation, analysis, review, and documentation of business functions and processes.

Elicit, analyze, document, and manage business and security requirements for complex projects within the Enterprise Security Program. Collaborate with business, security, technical, and project management stakeholders to ensure requirements are clear, feasible, and aligned with organizational objectives. Partner with Security Quality Assurance staff to validate and test security solutions, confirming they meet documented requirements. Trace requirements to corresponding code, policy, confirmation, or other implementation artifacts, as well as to validating test cases. Contribute to the continuous improvement of security business analysis processes and tools as a subject matter expert in both business analysis and the security domain. Share knowledge and best practices with peers to enhance team effectiveness.

A strong ability to communicate fluently in English, adapting your approach for various audiences including executives, sponsors, management, and project teams through verbal, written, and presentation skills. You are expected to proactively address delivery challenges and escalate when necessary. Personal accountability for adhering to all required business analyst deliverables and requirements is essential. Demonstrate an ability to collaborate effectively across diverse functional teams, cultures, and geographies, building trust virtually. Possess strong working knowledge or experience in Identity and Access Management. A proven track record of customer focus, built on openness, trust, and delivering on commitments. Extensive experience in writing and reviewing business, user, non-functional, and system-level requirements. Highly skilled in gaining alignment and approval of business requirements (functional and supplemental) from the user community. Extensive experience selecting and executing elicitation techniques such as interviews, exploratory prototypes, facilitated workshops, focus groups, observation, user task analysis, documentation study, surveys, and overall process re-engineering. Experience in developing and deploying formal business analysis methods and tools to govern and control programs. A solid understanding of key requirements models including Stakeholder Categories, Actor Tables, Glossary, Context Diagrams, Data Models, Class Models, Data Dictionaries, Event Response Tables, State Diagrams, Business Rules, Decision Tables, Process Maps, Use Cases, and Activity Diagrams. Demonstrate leadership in the use of IT methodologies, processes, and standards for business analysis.

Desired qualifications include 8-10 years of experience in business analysis within the information security domain for large, geographically diverse programs. Strong expertise in security technologies like cloud, network, perimeter, messaging, endpoint, and data security. Proficiency in requirements management methodologies and tools, along with advanced communication and stakeholder engagement skills. Relevant certifications such as CISSP, CISM, or CBAP are highly desirable.