Business Analyst supporting a CIS3 compliance programme by reviewing and redesigning application lifecycle, governance, security, risk and operational processes. Responsibilities include facilitating stakeholder workshops, mapping controls to lifecycle stages, defining stage gates, RACI models, assurance processes and target operating models, and producing process maps, control matrices, gap analyses, requirements and governance frameworks. The role requires strong process design, stakeholder engagement and experience with governance, risk, compliance or information security programmes.