Cyber Security Business Analyst

Job Title:
Senior Business Analyst - Cyber Resilience Programme (CRP)
Function:
Information Security (IS) - Cyber
Duration: 6 months (with potential extension to 12 months)

Position Summary:
The contractor will provide Business Analysis (BA) services for the Cyber Resilience Programme (CRP), focusing on the development, delivery, and embedment of the Target Operating Model (TOM). This role requires expertise in requirements gathering, workshop facilitation, and support for communications, reporting, and training activities related to TOM implementation.

Key Responsibilities:
Workshop Organization & Facilitation
• Coordinate, organize, and deliver workshops to confirm requirements for the cyber service catalogue.
• Prepare materials, facilitate discussions, and ensure all meeting outcomes are documented.
• Business Analysis for Service catalogue Development
• Conduct business analysis to define and agree upon service catalogue requirements.
• Develop and manage a comprehensive and detailed service catalogue based on workshop outcomes and stakeholder input.

Capabilities Framework & TOM Structure Review
• Review and analyse the capabilities framework to ensure alignment with the TOM structure.
• Incorporate findings from service catalogue requirements to enhance the TOM.
• Communication & Stakeholder Engagement
• Develop visuals and materials for clear communication of the TOM to relevant stakeholders.
• Support the TOM Delivery Manager in creating updates for stakeholders and intranet resources.

Metrics & Reporting Development
• Assist in developing metrics, reporting tools, and dashboards to measure TOM effectiveness and business-as-usual (BAU) performance.

TOM Maturity & Performance Data Collection
• Gather, analyse, and track data on TOM maturity and performance over time.
• Compile insights into reports to inform ongoing TOM development and improvement.

Documentation of Processes & Procedures
• Document processes and procedures supporting the TOM, including service catalogue updates.
• Record outputs from sessions and workshops, ensuring accurate capture of all relevant information.

Support for Internal Communications & Knowledge Sharing
• Work with the Delivery Manager to gather content for internal communications.
• Share relevant updates on TOM progression, service catalogue developments, and performance metrics.

Deliverables:
• Service catalogue: Comprehensive service catalogue documenting all requirements and ensuring alignment with the TOM.
• Workshop Materials & Outputs: Agendas, presentations, and detailed records of workshop discussions.
• Capabilities Framework Review: Analysis report linking TOM structure with the service catalogue outcomes.
• Stakeholder Communication Materials: Visual aids and clear documentation to facilitate TOM adoption.
• Performance Dashboards: Tools and reports to monitor the effectiveness of TOM implementation.
• Process & Procedure Documentation: Complete, accessible records for all TOM-related processes.

Milestones:
• Workshop Deliverables: Organize and document workshops within the first month.
• Initial Service catalogue Draft: Deliver the first draft within two months.
• Capabilities Framework Review Completion: Complete by the third month.
• Initial Reporting Dashboard: Implement reporting metrics by the fourth month.
• Final Service catalogue & Documentation: Completion by the sixth month.

Skills:
• Strong analytical and problem-solving abilities.
• Proven ability to facilitate workshops and communicate technical information to stakeholders.
• Proficiency in data analysis, dashboard/report creation, and stakeholder engagement.
• Familiarity with Target Operating Model (TOM) development and service catalogue frameworks.

Reporting:
• Reports to the CRP Program Manager and collaborates closely with the TOM Delivery Manager.
Review Process:
• Regular contract reviews, with milestones and deliverables tracked in collaboration with the CRP program team and PMO, ensuring alignment with project goals.