Business & Security Analyst (m/f/n)

Currently, for one of our Partners, we are looking for an experienced eDelivery Business & Security Analyst (m/f/n) to support a long-term project in an international public sector environment.

Requirements

• Education: EQF 6 minimum; EQF 7 will be considered an advantage.

• Business analysis experience: at least 8 years.

• Security work experience: at least 5 years.

• Experience with analysis and modelling techniques, including user stories, use cases, acceptance criteria, state diagrams and entity-relationship models: at least 5 years.

• Experience writing functional requirements: at least 5 years.

• Experience with BPMN, UML or equivalent modelling standards: at least 5 years.

• Experience with requirements management tools such as Jira or GitLab: at least 5 years.

• Experience working with APIs, including REST, SOAP or OpenAPI: at least 5 years.

• Experience with encryption protocols and technologies, including TLS/SSL, IPSec, AES, RSA or PKI: at least 3 years.

• Experience with collaboration platforms such as Confluence or SharePoint: at least 3 years.

• Experience in business analysis related to eDelivery specifications, including eDelivery AS4, eDelivery SMP, eDelivery BDXL and eDelivery ebCore PartyId.

• Experience with eDelivery products such as Domibus, DomiSMP and DomiSML.

• Experience with the eDelivery Conformance Testing Service.

• Experience in eliciting, validating and documenting business needs using structured techniques.

• Experience in preparing Business Requirements Documents, Functional Specifications, User Stories and acceptance criteria.

• Experience in defining and managing acceptance criteria, supporting test case design and User Acceptance Testing.

• Experience in maintaining requirements traceability and managing change requests throughout the lifecycle.

• Experience in documenting non-functional requirements, including performance, security and usability.

• Experience in developing and implementing security policies and procedures.

• Experience in defining, implementing and monitoring security plans.

• Experience in guiding development teams throughout the Software Development Lifecycle to build and operate software securely.

• Experience with security standards and industry best practices, including OWASP Top 10.

• Experience in conducting security inspections, code reviews and risk assessments for internally developed and SaaS applications.

• Experience in monitoring systems for security breaches and incidents.

• Experience in analysing and responding to security threats and vulnerabilities, including managing remediation processes through to closure.

• Experience in designing and deploying security solutions for data centre and cloud environments.

• Experience in collaborating with IT and business teams to ensure compliance with security standards.

• Experience in data protection and privacy through encryption and access controls.

• Experience in managing and configuring security tools.

• Experience in leading security incident response, including containment, eradication, recovery and post-incident analysis and reporting.

• English: minimum C1 level, with strong written and oral communication skills.

• CV must be provided in Europass format.

Nice to have

• Business analysis experience above 10 years.

• Security work experience above 7 years.

• Experience with key eDelivery standards: OASIS ebMS3, AS4, SMP, BDXL and ebCore PartyId.

• Experience with eDelivery profiles: eDelivery AS4 profile, eDelivery SMP profile, eDelivery BDXL profile and eDelivery ebCore PartyId profile.

• Experience with integrating security into DevSecOps pipelines, including SAST, DAST and software supply chain security tools.

• Experience with cloud security architectures and controls.

• Experience with diagramming, modelling and wireframing tools such as Microsoft Visio, Lucidchart, UML, BPMN, Axure, Balsamiq or Pencil.

• Experience with secure coding practices and common vulnerabilities, including OWASP Top 10.

• Experience with vulnerability assessment and penetration testing methodologies and tools such as Nessus, Qualys, Burp Suite, Metasploit or OWASP ZAP.

• Recognised certification in information systems security.

• Experience working in an international or intergovernmental organisation, European Institutions or large public administration.

• Experience preparing business analysis deliverables.

• Experience tailoring communication to business and technical audiences.

• Experience producing structured technical documentation, specifications and presentations in English.

• French: B2 level.

Offer

• Contract: B2B via SHIMI Poland.

• Type of work: mostly remote / far-site work. Services must be performed from within the EU.

• On-site presence: occasional travel to Brussels may be required. For far-site delivery, on-site presence in Brussels may be requested with 7 days’ notice.

• Travel: 2 physical meetings with the customer are foreseen per 12-month period, maximum 2 days each. These planned meetings are at the contractor’s cost. Additional travel may be reimbursed only if explicitly requested and approved by the customer.

• Rate: 450–540 EUR/MD.