Mission Description

As part of the preparatory phase for compliance with the NIS2 law, a business analyst profile is requested to carry out the following activities:

• Inventory applications (mapping) and coordinate with application managers the documentation of authorization levels provided by these applications. The information collection must be structured and consolidated in a central repository. The role is to ensure coordination of contributors and to actively contribute to the enrichment of this deliverable as well as to ensure its quality control and consistency.
• Coordinate, facilitate, and coach workshops with business stakeholders to model access roles. The responsibility is to produce a coherent model validated by the business security officers.
• Perform access recertifications and ensure the implementation of Least Access Privilege. The responsibility is to produce evidence that can be used during NIS2 audits.
• Establish business profiles documenting the necessary accesses, including privileged accesses. The responsibility is to produce a reusable documentation model for future access requests, taking into account the requirements imposed by NIS2 (segregation of duties, Least Access Privilege, etc.).
• Cooperate with technical teams to translate these business profiles and RBAC models into operational tools such as IGA, Bastion, PIM, PAM, etc. The role is to act as the link between business teams describing business activities and operational teams responsible for implementing access in the various tools.

Additional information: The mission can be extended for a maximum duration (initial duration included) of: 880 business days.