Medior Business Analyst – Cybersecurity & NIS2 Compliance

Overview

We are looking for a Medior Business Analyst to support the preparation phase of a NIS2 compliance program. The role focuses on application access governance, role modeling, access recertification, and collaboration between business and technical teams to strengthen identity and access management practices.

Key Responsibilities

• Inventory and map business applications and document their authorization models
• Coordinate with application owners to collect, validate, and consolidate access-related information into a central repository
• Facilitate and lead workshops with business stakeholders to define and model access roles
• Produce coherent and validated RBAC (Role-Based Access Control) models
• Conduct access recertification activities and support Least Privilege implementation
• Create audit-ready evidence and documentation for NIS2 compliance requirements
• Define and document business access profiles, including privileged access requirements
• Ensure compliance with segregation of duties (SoD) and Least Privilege principles
• Act as the liaison between business teams and technical teams implementing access controls
• Support the translation of business roles into operational solutions such as IGA, PAM, PIM, and Bastion platforms
• Perform quality control and ensure consistency across governance deliverables

Required Skills

• Strong Business Analysis experience
• Knowledge of Identity and Access Management (IAM) concepts
• Experience with RBAC/ABAC models
• Understanding of Active Directory environments
• Familiarity with IGA, PAM, PIM, and Bastion solutions
• Knowledge of CMDB and application inventory management
• Understanding of cybersecurity governance and compliance frameworks
• Good analytical, documentation, and stakeholder management skills
• SQL knowledge is an advantage
• Ability to work independently and collaboratively in large organizations

Preferred Qualifications

• Experience in cybersecurity or identity governance projects
• Experience in large enterprise environments (8,000+ employees)
• Experience in public transportation or regulated industries is an asset
• ISO 27001 Foundation certification is an advantage
• CIAM and/or CAMS certifications are considered a plus

Languages

• French or Dutch: Native/Bilingual proficiency
• English: Professional working proficiency

Work Conditions

• Hybrid working model
• On-site presence required 2–3 days per week
• Long-term mission with potential extensions
• Location: Brussels