Business Analyst (Cybersecurity & Digital Solutions)

Digital Solutions Conceptualisation Lead

Key Responsibilities

• Safety
  • Demonstrate an incident-free culture and HSE leadership behaviours.
  • Ensure project activities, deployments, and third-party work comply with all HSE guidelines.
  • Maintain psychologically safe team environments and promote transparent communication.
  • Ensure digital solutions contribute positively to safety and risk reduction.
• Cybersecurity
  • Apply Cyber Security Policies and Security standards to all project phases.
  • Coordinate cyber risk assessments, security architecture reviews, and threat modelling.
  • Ensure correct identity/access management, data handling, and data classification compliance.
  • Ensure vendors and partners meet cybersecurity and data governance expectations.
• Opportunity Identification, Conceptualization & Business Analysis
  • Act as a structured entry point for digital ideas and opportunities, supporting evaluation, prioritisation, and progression through the conceptualisation lifecycle.
  • Lead discovery activities with business stakeholders to understand problems, processes, pain points, data requirements, risks, constraints, and desired outcomes.
  • Facilitate workshops, interviews, and analysis activities to define business requirements, user needs, scope, value drivers, and success criteria.
  • Challenge assumptions, evaluate solution options, and assess process, data, technology, and organisational alternatives.
  • Coordinate conceptualisation activities and prepare key deliverables including framing documents, requirements, value cases, roadmaps, prioritised functionality, and scopes of work.
  • Maintain visibility of the conceptualisation portfolio and provide reporting on progress, priorities, dependencies, and resource demand.
• Delivery Readiness, Governance & Stakeholder Management
  • Coordinate Definition of Ready (DoR) activities and ensure initiatives meet agreed readiness and governance requirements prior to delivery.
  • Engage and align stakeholders across business entities, digital teams, and external partners to ensure initiatives progress effectively.
  • Navigate processes including demand management, architecture, cybersecurity, data governance, procurement, and delivery governance.
  • Identify risks, issues, dependencies, and gaps, escalating where required.
  • Facilitate structured handover to delivery teams and support transition activities as required.
  • Prepare updates and reporting for management, governance forums, and steering committees.
• Third Party Oversight and Quality Assurance
  • Define and communicate the expected scope, activities, deliverables, milestones, and quality standards for third party-led conceptualisation work.
  • Oversee progress against agreed plans and ensure the appropriate discovery, analysis, stakeholder engagement, and governance activities are completed.
  • Review and challenge conceptualisation outputs to ensure they accurately reflect business needs, technical context, requirements, value, costs, risks, and dependencies.
  • Provide direction and feedback, addressing delays, quality concerns, scope gaps, and unresolved decisions through corrective action or escalation.
  • Ensure outputs produced by third parties meet Definition of Ready requirements and provide a complete, coherent, and usable handover to delivery.
• Costing, Value & Commercial Support
  • Develop and maintain cost estimates, forecasts, value assessments, and funding assumptions throughout the conceptualisation lifecycle.
  • Lead business case development, demand reviews, planning activities, and procurement processes.
  • Coordinate with finance, cost control, contracts and procurement, delivery teams, and vendors to validate estimates, assumptions, and commercial inputs.
  • Maintain visibility of budget, commitment, forecast, and cost-related information for assigned initiatives, escalating risks and variances where appropriate.

Requirements

Relevant experience in digital solutions, business analysis, cybersecurity, project governance, and commercial support is required. Strong stakeholder management, communication, and leadership skills are essential.