Vector Resourcing
Business Analyst - IAM/MFA
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Business Analyst - IAM/MFA
Business Analyst - Access Control & Multi-Factor Authentication
Our client is looking for an experienced Business Analyst to lead the discovery phase of a programme designed to strengthen access controls and multi-factor authentication across a portfolio of SaaS applications. You will establish a clear understanding of authentication methods, access models, data sensitivity, and security risks across the estate, working closely with Security, IAM, HR Systems, and IT leadership. This role is focused on security discovery, control assessment, and creating the foundations for a wider access management transformation programme.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Responsibilities
Get help with your application
Your very own career expert that helps elevate your application to the next level.
- Lead structured discovery activities across an initial portfolio of 40 SaaS applications, including HR and payroll platforms
- Document existing authentication methods, user access models, provisioning processes, and identity dependencies for each application
- Assess the sensitivity, criticality, and business usage of application data to support security control decisions
- Analyse current access controls and identify gaps against organisational security and identity management requirements
- Evaluate MFA feasibility across each platform, identifying technical constraints, vendor limitations, and implementation considerations
- Capture and maintain risks, assumptions, dependencies, exceptions, and remediation recommendations throughout the discovery process
- Support security policy decision-making relating to personal device usage, authentication methods, and alternative access approaches
- Establish and maintain a consolidated register of applications, security classifications, authentication methods, required controls, and recommended solutions
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills