About the mission
We are looking for a Business Analyst to support compliance with the NIS2 law. The role involves inventorying applications, coordinating documentation, facilitating workshops, and collaborating with technical teams to ensure proper access management.
Read the full description
Mission Description
As part of the preparatory phase for compliance with the NIS2 law, we are looking for a business analyst to carry out the following activities:Inventory applications (mapping) and coordinate with application managers the documentation of the authorization levels offered by these applications. The information collection must be structured and consolidated in a central directory. The role is to ensure the coordination of contributors and to be an active participant in enriching this deliverable as well as ensuring quality control and coherence.
Coordinate, facilitate, and coach workshops with business stakeholders to model access roles. The responsibility is to produce a coherent model validated by the business security officers.
Perform access recertifications and ensure the implementation of the Least Access Privilege. The responsibility is to produce evidence that can be used during NIS2 audits.
Establish business profiles documenting necessary accesses including privileged accesses. The responsibility is to produce a reusable documentation model for future access requests while considering the constraints required by NIS2 (segregation of duties, Least Access Privilege,...).
Cooperate with technical teams to translate these business profiles and RBAC models into operational tools such as IGA, Bastion, PIM, PAM,... The role is to bridge the business teams describing business activities and the operational teams implementing access in various tools.
Additional Information
The mission can be extended for a maximum duration (initial duration included) of: 880 working days.What you'll do
- Inventory applications and coordinate documentation of authorization levels
- Facilitate workshops with business stakeholders to model access roles
- Perform access recertifications and ensure implementation of Least Access Privilege
- Establish business profiles documenting necessary accesses
- Cooperate with technical teams to translate business profiles into operational tools
What we're looking for
- Experience in business analysis
- Knowledge of NIS2 compliance
- Ability to coordinate and facilitate workshops
- Experience with RBAC models
- Familiarity with operational tools such as IGA, Bastion, PIM, PAM
Skills
- Active Directory
- Bastion
- CMDB
- IGA
- PAM
- PIM
- RBAC/ABAC
- SQL