Business Analyst (Security Cleared)

Senior Business Analyst

Please note - you must hold active UK Government Security Clearance (SC) when applying for this position

Role Overview

Join HMRC as a Senior Business Analyst and play a pivotal role in supporting a major digital transformation programme. You will work at the intersection of business change, enterprise architecture, security and governance, helping to shape, define and validate business needs while ensuring alignment to organisational strategy, architecture principles and control frameworks.

A key aspect of this role will be translating complex technical, architectural and security requirements into clear business outcomes, establishing traceability between requirements, controls, risks, services and architecture artefacts. You will work closely with architects, security specialists and senior stakeholders to ensure solutions are aligned to enterprise standards and recognised frameworks, including industry standards such as NIST.

This role combines strong analytical capability, stakeholder management and technical awareness, requiring excellent communication skills to bridge the gap between business and technical teams across a complex delivery environment.

Essential Criteria

• Proven experience leading business analysis on complex, cross-cutting change initiatives involving strategy, operating models, governance and technology-enabled transformation.
• Understanding of enterprise architecture concepts, principles, repositories and modelling approaches, with the ability to align business requirements to architectural outcomes.
• Experience working with security, risk and controls frameworks, including the mapping of business requirements, controls and services to recognised standards (e.g. NIST or equivalent frameworks).
• Demonstrable experience establishing traceability across requirements, risks, controls, services and architectural components to support informed decision-making and governance.
• Strong stakeholder leadership skills, including workshop facilitation, influencing senior stakeholders, resolving conflict, driving decisions and managing ambiguity.
• Ability to translate complex security, architecture and technical inputs into clear recommendations, roadmaps and decision papers for senior audiences.
• Comfortable operating in a fast-paced environment and able to quickly understand complex domains and deliver value from day one.

Desirable Criteria

• Experience supporting cyber security, risk management or governance-related transformation programmes.
• Familiarity with architecture tooling and repositories used to manage enterprise architecture and business capability models.
• Previous experience working within government, regulated environments or large-scale transformation programmes.