SC Cleared Business Analyst

Job Title: SC Cleared Business Analyst
Location: Harlow (4-5 days in office for the first 4 weeks, 2-3 days thereafter)
Salary/Rate: £500-600 (dependent on clearance experience)
Start Date: 05/10/2026
Job Type: Initial contract until 24/12/2026

Company Introduction
We have an exciting opportunity now available with one of our sector-leading consultancy clients! They are currently looking for a skilled SC Cleared Business Analyst to join their client within the Defence industry.

Job Responsibilities/Objectives
You will be responsible for eliciting, documenting and validating IT processes with technical stakeholders, driving governance and sign-off, and ensuring practical, usable process documentation is implemented across the organisation.

Process capture and authoring

• Interview IT staff across security, cloud, infrastructure, networking and related functions to elicit how processes currently work
• Document existing processes where nothing written exists
• Produce to-be definitions where no process exists at all
• Take an existing gap analysis and action it
• Policy work: the client's parent policy set is heavily US-centric, and part of the work is adapting those global policies to a UK context
• Play processes back to the people who own them and get them validated

Governance

• Run the governance that ensures documented processes are implemented, not shelved
• Ensure artefacts are reviewed and signed off through the proper route
• Chase, track and escalate sign-off where it stalls
• Governance is a real part of the role, not an afterthought. It needs someone who can hold people to commitments without damaging the relationship they have just built.

Who this person needs to be

• A people person first. Gets on with people quickly, easy to talk to, and technical staff do not feel audited by them. The client's IT people are busy and have no particular reason to help.
• Can extract knowledge that has never been written down. A specific skill, and not every BA has it. Asking the question behind the question, noticing an incomplete answer, tolerating a messy first pass, and coming back a second and third time without the SME resenting it.
• Holds their own with technical people. Enough technical literacy to follow a security, cloud, infrastructure or networking conversation and ask a sensible follow-up. This is an IT business analyst, not a business-change or transformation BA.
• Explains themselves well. Much of the first weeks is telling people who they are, what they are doing and why it matters, to someone who sees it as an interruption.
• Persistent without being irritating. Will chase a sign-off four times and still be welcome in the room.
• Pragmatic about quality. Knows the difference between good enough to be useful and not finished, and is not precious about notation or format.
• Comfortable with an unfinished ending. The engagement stops on 24 December with work outstanding by design.

Required Skills/Experience
The ideal candidate will have the following:

Essential

• BA experience within an IT or technology function, eliciting and documenting technical and operational processes
• Strong elicitation and interview skills, with real examples of extracting undocumented process from SMEs
• Workshop and playback facilitation: can run a validation session and get agreement
• Process documentation and mapping: clear, executable output. BPMN or equivalent, used pragmatically
• Confident with technical IT stakeholders across security, cloud, infrastructure and networking
• Stakeholder management where the analyst has no authority and the stakeholders are busy
• Governance: tracking artefacts through review and sign-off, and chasing where it stalls
• Self-directed. There is no lead analyst and no project manager on this engagement
• BPSS eligible, UK resident with the right to work in the UK
• On site in Harlow, and available to start 05/10/2026

Desirable

• SC already held.
• Defence, aerospace or another regulated environment
• ISO 27001 exposure or a comparable control framework. Context, not a core requirement: ISO is why the client needs the processes documented, but the job is producing the documentation
• Policy writing or adaptation, particularly localising US-originated policy for the UK
• Process maturity uplift and familiarity with a maturity model
• BCS International Diploma in Business Analysis or IIBA (CBAP/CCBA)

Not required

• Not a cyber security role. They work with the cyber team but do not do security work. No security consultants, GRC analysts or SOC analysts
• Not technical delivery or engineering. No build, configuration or implementation
• No project management requirement
• No specific toolset
• Deep technical certification not wanted. An over-technical candidate will want to solve the problem rather than document it

If you are interested in this opportunity, please apply now with your updated CV in Microsoft Word/PDF format.

Disclaimer
Notwithstanding any guidelines given to level of experience sought, we will consider candidates from outside this range if they can demonstrate the necessary competencies.
Square One is acting as both an employment agency and an employment business, and is an equal opportunities recruitment business. Square One embraces diversity and will treat everyone equally. Please see our website for our full diversity statement.