IAM Business Analyst

Contract Length: 6 months rolling

Location: Edinburgh, Scotland

WFH Split: 2 days onsite, 3 days WFH

Type: Inside IR35

Role Overview

The Technical Business Analyst will be responsible for eliciting, analysing, documenting and managing business, functional and technical requirements for Identity Services and Customer Identity & Access Management (CIAM) capabilities. The role will focus on Multi-Factor Authentication (MFA), biometric authentication, digital identity and digital trust services across Retail, Commercial & Institutional (C&I) and Wealth divisions.

The role requires an experienced Technical Business Analyst with strong Agile delivery experience, excellent stakeholder management skills and the ability to translate complex business, security, fraud, regulatory and technical requirements into clear and actionable requirements, user stories and solution designs. The successful candidate will work closely with customers, users, business stakeholders, architects, engineering teams, security, fraud, risk and third-party vendors to support the delivery of reusable authentication and identity capabilities across the bank.

The Technical Business Analyst will support the delivery of the strategic Identity Services roadmap, including the expansion of MFA and biometric services, web and mobile authentication, step-up authentication, identity verification, enhanced digital trust, deepfake and injection attack detection, voice cloning protection, WebAuthn/passkeys, identity federation, single sign-on and platform modernisation initiatives. The role will be responsible for requirements gathering, impact analysis, process modelling, documentation, backlog refinement and ensuring solutions are aligned to customer outcomes, security requirements, regulatory obligations and wider platform strategy.

Key Responsibilities:

• Elicit, analyse and document business, functional, non-functional and technical requirements across Identity Services and CIAM initiatives.
• Work with business stakeholders, product teams, architects, engineers, security, fraud and risk teams to define requirements and acceptance criteria.
• Translate complex business and technical requirements into epics, features, user stories, process flows and functional specifications.
• Facilitate workshops, requirements gathering sessions and stakeholder interviews to define business needs and solution outcomes.
• Create and maintain detailed documentation including:
  • Business Requirements Documents (BRDs)
  • Functional Specifications
  • User Stories
  • Process Maps
  • Data Flows
  • Interface Specifications
  • API Requirements
• Support backlog refinement activities and ensure requirements are sufficiently detailed for development and testing teams.
• Conduct impact assessments for platform enhancements, regulatory changes and strategic transformation initiatives.
• Collaborate with architects and engineering teams to ensure proposed solutions are technically feasible and aligned with enterprise architecture standards.
• Support testing activities through requirements traceability, test scenario definition, defect analysis and UAT coordination.
• Work with third-party vendors and suppliers to understand product capabilities, integration requirements and implementation considerations.
• Assist with identifying opportunities to improve customer experience, strengthen security controls and reduce fraud risk through enhanced authentication capabilities.
• Ensure identity and authentication solutions comply with security, operational resilience, fraud prevention and regulatory requirements.

Required experience:

• Proven Business Analyst or Technical Business Analyst experience within Agile and/or SAFe delivery environments.
• Strong experience gathering, documenting and managing complex business and technical requirements.
• experience producing user stories, acceptance criteria, process flows, data models and functional specifications.
• Strong understanding of Identity & Access Management (IAM), Customer IAM (CIAM), authentication, authorisation, single sign-on (SSO) and identity federation.
• experience working within cyber security, fraud prevention, digital identity, biometric authentication or financial services technology environments.
• Ability to operate within a highly technical domain and collaborate effectively with architects, engineers and security specialists.
• Strong stakeholder management, communication and facilitation skills across business, technology, risk, fraud and security teams.
• experience supporting delivery across multiple workstreams, platforms or Agile teams.
• Commercial awareness, including exposure to third-party vendors, supplier solutions and delivery partnerships.
• experience conducting gap analysis, impact assessments and process improvement activities.
• Understanding of system integration patterns, APIs, data flows and technical solution design.

Trading as TEKsystems. Allegis Group Limited, Maxis 2, Western Road, Bracknell, RG12 1RT, United Kingdom. No. 2876353. Allegis Group Limited operates as an Employment Business and Employment Agency as set out in the Conduct of Employment Agencies and Employment Businesses Regulations 2003. TEKsystems is a company within the Allegis Group network of companies (collectively referred to as "Allegis Group"). Aerotek, Aston Carter, EASi, Talentis Solutions, TEKsystems, Stamford Consultants and The Stamford Group are Allegis Group brands. If you apply, your personal data will be processed as described in the Allegis Group Online Privacy Notice available at https://www.allegisgroup.com/en-gb/privacy-notices.

To access our Online Privacy Notice, which explains what information we may collect, use, share, and store about you, and describes your rights and choices about this, please go to https://www.allegisgroup.com/en-gb/privacy-notices.

We are part of a global network of companies and as a result, the personal data you provide will be shared within Allegis Group and transferred and processed outside the UK, Switzerland and European Economic Area subject to the protections described in the Allegis Group Online Privacy Notice. We store personal data in the UK, EEA, Switzerland and the USA. If you would like to exercise your privacy rights, please visit the "Contacting Us" section of our Online Privacy Notice at https://www.allegisgroup.com/en-gb/privacy-notices for details on how to contact us. To protect your privacy and security, we may take steps to verify your identity, such as a password and user ID if there is an account associated with your request, or identifying information such as your address or date of birth, before proceeding with your request. If you are resident in the UK, EEA or Switzerland, we will process any access request you make in accordance with our commitments under the UK Data Protection Act, EU-U.S. Privacy Shield or the Swiss-U.S. Privacy Shield.