Lead Business Analyst

<p><b>About the Role</b></p><p><b>We are looking for an experienced, hands-on quality and assurance professional to strengthen process quality, control effectiveness and audit readiness across Engineering.</b></p><p><b>The role will work with Engineering teams to review processes and controls, identify gaps, drive Engineering audit readiness, support internal, external and customer audits, and take findings through remediation and evidence-based closure. It will also provide governance-level assurance over project quality practices and artefacts where required.</b></p><p><b>The person should be comfortable working across Engineering teams and with audit and assurance stakeholders, and should be able to translate control or process requirements into practical improvements that teams can understand and adopt. The role acts as a trusted partner and coach to Engineering, working collaboratively with teams to demystify compliance, reduce friction, and build quality directly into daily workflows rather than acting as a passive auditor or gatekeeper. The role will also help ensure that controls, traceability and evidence are embedded wherever practical into Engineering processes and tools rather than relying on parallel or retrospective documentation.</b></p><p><b><br /></b></p><p><b>Key Responsibilities</b></p><p><b>•Review Engineering processes and controls for effectiveness, consistency, traceability and audit readiness. </b></p><p><b>•Conduct process and control reviews to identify gaps, improvement opportunities and recurring issues. </b></p><p><b>•Drive Engineering audit readiness and coordinate Engineering participation in internal, external and customer audits, including ISO/IEC 27001 and SOC 2 assessments; guide teams on audit requirements, prepare and review evidence, support teams during auditor interactions, and coordinate responses and follow-through on findings. </b></p><p><b>•Act as an enablement partner and coach to Engineering teams, fostering a culture of self-assurance and continuous improvement around quality and controls rather than policing processes.</b></p><p><b>•Analyze audit findings, non-conformities and observations; help determine corrective actions, owners and evidence required for closure. </b></p><p><b>•Work with accountable owners through remediation, evidence submission and formal closure of findings. </b></p><p><b>•Review supporting evidence for completeness, traceability and alignment with applicable control or audit requirements. </b></p><p><b>•Use root-cause analysis and corrective/preventive action thinking to address underlying issues and reduce recurrence. </b></p><p><b>•Review project-level quality and testing artefacts, where required, from an Engineering Governance and assurance perspective. This may include test plans, test results, UAT evidence, release/readiness records and other relevant quality evidence. </b></p><p><b>•Assess whether project QA practices and evidence align with applicable PDLC, Engineering quality and audit requirements, and work with project QA, delivery and Engineering owners on identified gaps. </b></p><p><b>•Perform periodic or risk-based assurance reviews and sampling across projects where appropriate. </b></p><p><b>•Review and strengthen how Engineering controls are implemented through Jira, Jira Service Management (JSM) and Confluence, including workflows, approvals, required records, traceability and audit trails, and work with process/tool owners to address control and evidence gaps. </b></p><p><b>•Maintain sufficient working knowledge of Git/source control and CI/CD to understand how Engineering controls, approvals, traceability and evidence can be embedded or evidenced through the delivery toolchain; identify opportunities to address control or audit-evidence gaps through existing tools and automation, working with technical specialists where deeper expertise is required. </b></p><p><b>•Look for practical ways to embed controls and evidence into existing Engineering processes and tools rather than creating unnecessary parallel documentation. </b></p><p><b>•Conduct training, awareness and knowledge-sharing sessions for Engineering teams on relevant processes, controls, audit requirements and identified gaps. </b></p><p><b>•Develop simple guidance, checklists or supporting material where useful and help teams understand the practical actions required to improve compliance and process quality. </b></p><p><b>•Help establish useful measures for process quality, control effectiveness, audit readiness, ageing and finding closure. </b></p><p><b>•Work closely with PDLC, Engineering Governance, Information Security and other relevant stakeholders to strengthen Engineering assurance and continuous improvement.</b></p><div><div>Skills & Experience</div><div>•Typically 8–12 years of relevant experience, including demonstrated hands-on experience performing responsibilities substantially similar to this role. </div><div>•Strong coaching, facilitation and influencing skills, with a consultative approach to helping Engineering leads and project teams understand why controls matter and how to implement them with minimal friction</div><div>•Prior hands-on experience in Engineering/process assurance, audit readiness, process or control reviews, audit finding remediation and evidence-based closure. </div><div>•Hands-on experience preparing Engineering or technology teams for and supporting internal, external, ISO, SOC 2 and/or customer audits, including evidence preparation, auditor interactions and finding remediation. </div><div>•Good understanding of software development, software quality and Engineering processes, with the ability to review project QA artefacts and evidence from an assurance perspective. </div><div>•Ability to understand audit and control requirements and translate them into practical actions for Engineering teams. </div><div>•Good understanding of evidence, traceability, audit trails, root-cause analysis and corrective/preventive actions. </div><div>•Working knowledge of Jira, Jira Service Management (JSM) and Confluence, with the ability to assess how workflows, approvals, records, traceability and audit evidence support Engineering controls and identify areas requiring improvement. </div><div>•Openness to AI-enabled ways of working, with the ability to identify practical opportunities to use AI and automation to improve assurance, evidence review, analysis and governance effectiveness.</div><div>•Broad working understanding of Git/source control and CI/CD concepts and how these can support delivery controls, traceability, automated evidence and audit assurance. </div><div>•Familiarity with SDLC/PDLC and Agile ways of working. </div><div>•Ability to define and use practical quality and assurance measures to track control effectiveness, audit readiness, ageing, remediation and finding closure.</div><div>•Ability to identify practical opportunities to embed controls, traceability and evidence into Engineering processes and toolchains, reducing unnecessary manual or parallel documentation.</div><div>•Strong written and verbal communication skills, with the ability to explain process and control requirements clearly to technical and non-technical stakeholders. </div><div>•Ability to conduct effective training, awareness and knowledge-sharing sessions and engage confidently with Engineering leaders, project teams, auditors and assurance stakeholders.</div><div>Desirable</div><div>•Experience with ISO/IEC 27001:2022 audits, controls or assurance activities. </div><div>•Experience with SOC 2/SOC assurance, customer audits or similar technology-control environments. </div><div>•Experience improving or automating control evidence and assurance activities through Engineering processes and toolchains. </div></div><div><br /></div>