If you're staffing a defence digital programme and your timeline can't absorb a 16-week clearance wait, you're already losing money on the brief. Cleared Business Analyst supply is the tightest part of the UK defence digital labour market in 2026, and most hiring managers find this out four weeks into a search that should have taken ten days. This guide is for prime contractor PMs, capability leads, and procurement teams who need to mobilise SC or DV cleared BAs onto contracts at AWE, Defence Digital, DE&S, and the wider Tier 1 prime ecosystem.
We're Scantec. We've been recruiting into UK defence and nuclear since 1990, our Engineering division places security cleared talent across project controls, infrastructure, defence, and energy, and our cleared BA bench is built for outside-IR35 and inside-IR35 contract work, not permanent.
Key takeaways
- Cleared BA outside-IR35 day rates run £400-£750 in May 2026, with DV/eDV roles commanding £700-£850 (Source: ITJobsWatch April 2026)
- 72% of SC clearances now exceed the original 25-day target; DV processing routinely runs 6-9 months (Source: NAO 2023)
- April 2026 Joint & Several Liability legislation makes end-clients and agencies jointly liable for PAYE/NIC compliance in umbrella supply chains
- The cleared candidate pool is structurally restricted; primes that retain a specialist recruiter typically mobilise contractors in 2-4 weeks rather than 12-26 weeks
- Scantec's contract-only cleared BA bench is built for the M4 and south coast defence corridor: Reading, Oxfordshire, Southampton, Swindon
What is a Cleared Business Analyst?
A Cleared Business Analyst is a security-vetted contract specialist responsible for eliciting, modelling and documenting business and system requirements on UK defence, intelligence and government digital transformation programmes, using BPMN process modelling, Sparx Enterprise Architect, JIRA backlog management and SQL data analysis within OFFICIAL-SENSITIVE and SECRET classification environments.
The cleared market sits inside a wider UK BA contracting market with a median day rate of £500 according to ITJobsWatch (6 months to 23 April 2026). What separates it is the clearance moat. A non-cleared BA at the same experience level commands 22-27% less, takes 10-26 weeks longer to deploy if sponsorship is needed, and can't sit in the rooms where the requirements actually get elicited. Hiring managers who try to substitute cleared with non-cleared on a defence digital programme typically lose the first month to access friction.
Pete Bates, Scantec MD, has confirmed the wider direction of travel: every Business Analyst Scantec places into the defence sector is on contract, not permanent, with the BA work concentrated in IT/SaaS programmes and engineering/defence digital transformation. That mirrors techUK's reading of the post-SDR 2025 market, where MOD increasingly delivers through Tier 1 prime + cleared contractor models rather than expanding direct civilian Defence Digital headcount.
For the foundational view of UK security clearance levels and what they cover, our security clearance overview sets out BPSS, CTC, SC, DV and eDV alongside processing realities.
The Five Hard Skills Every Defence-Cleared BA Must Demonstrate
Generic BA skills won't pass a defence prime's technical assessment. The five hard skills below are the ones that show up in cleared BA contract specs across Cwjobs, Indeed, and Securityclearedjobs in the six months to April 2026.
Requirements elicitation and Statement of Requirements authorship
Statement of Requirements (SoR) authorship is the primary BA deliverable on MOD digital programmes. SoR documents drive tender packs and procurement at AWE, DE&S, and BAE Digital Intelligence. A cleared BA who can't produce a defensible SoR with traceability back to elicited requirements is a BA who'll burn the prime's contract at the first procurement gate. Source: ZipRecruiter IO Associates SC BA listing, 2026-02.
BPMN process modelling (As-Is / To-Be)
Modelling current and future state operating models is the headline technical capability cited across SC-cleared BA roles. Sparx Enterprise Architect, Visio and Lucidchart dominate the tooling stack. Sparx specifically supports BPMN, ArchiMate and UML in a single environment, which is why it's the default at primes running enterprise architecture practices alongside BA delivery. Source: Indeed UK security cleared BA listings, 2026-02; scmGalaxy EA Tools 2026.
JIRA and Confluence in SAFe or Scrum delivery
Every SC BA contract spec we've reviewed in 2026 lists JIRA and Confluence as baseline. User story authoring, backlog management, and sprint ceremony participation are non-negotiable. SAFe Agilist or Scrum Master credentials add a 10% rate uplift on cleared BA roles per ITJobsWatch contract data April 2026. Source: Accenture Newcastle BA listing, 2026-02; Korn Ferry BA spec 2026.
SQL and data analysis (intermediate to advanced)
JOINs, GROUP BY, window functions, NULL handling. SQL is the most-tested technical skill in 2026 BA interviews and a hard requirement on cleared programmes involving data platforms. The Palantir £240m MOD contract awarded December 2025 has materially increased SQL-and-data-platform demand inside cleared BA briefs. Source: DataCamp BA Interview Guide 2026.
Defence security policy frameworks
JSP 440, HMG Personnel Security Controls, and Secure by Design. Cleared BAs working at AWE, BAE Digital Intelligence and Defence Digital must produce documentation that meets MOD secure-by-design standards. This is the differentiator versus generalist BAs, and it's the area where commercial banking BAs trying to pivot into defence most commonly fail the technical screen. Source: Indeed Red Armour Stevenage BA listing, 2026-02; GOV.UK National Security Vetting clearance levels.
For deeper context on how clearance pipelines feed defence engineering programmes more widely, our coverage of defence and nuclear sourcing walks through the Scantec methodology.
The Five Soft Skills That Separate Defence BAs From Commercial BAs
Hard skills get the CV through screening. Soft skills determine whether the BA survives month two of the programme.
Stakeholder facilitation in highly scrutinised, classified environments. Cleared BAs run discovery workshops with senior MOD officers, prime contractor PMs, and operational military users. Failure to facilitate these multi-rank, multi-clearance sessions stalls programme delivery. A single missed requirement on a defence digital build can delay procurement gates by months. Source: Jobsite London BA contract listing, 2026-03.
Translating sensitive operational context into compliant requirement specs. Defence BAs hear classified content during elicitation but produce documentation at lower classifications for wider supply chain consumption. Misjudging the classification boundary creates information assurance breaches. Getting it right keeps the programme moving and protects the prime's reputation with the customer. Source: Securityclearedjobs.com Senior BA Security & Intelligence listing, 2026-04.
Resilience under defence procurement scrutiny. SDR 2025 and the Defence Industrial Strategy have intensified Treasury and PAC oversight of MOD digital spend. BAs draft business cases that face line-by-line external challenge. Candidates who fold under scrutiny burn the prime's contract; those who hold their analytical line maintain delivery confidence. Source: techUK 2025 Year in Defence, 2026-01.
Cross-rank communication translating MOD-speak into commercial requirements. Military stakeholders use doctrine, JSP and operational acronyms; technical delivery teams use Agile, cloud and platform terms. The cleared BA is the only role that bridges both vocabularies. Primes who staff this badly see 30-40% rework cycles. Source: BAE Systems Digital Intelligence careers material, 2026.
Discretion and operational security awareness. Cleared BAs frequently work on pre-announcement programmes such as GCAP, DroneTex, and the post-SDR digital reset workstreams. Loose talk inside or outside the programme can collapse SC clearance status and end a contracting career. Primes view discretion as the second clearance layer. Source: GOV.UK National Security Vetting; Wikipedia Security Vetting UK 2026.
Five Competency Interview Questions That Filter Cleared BAs From Pretenders
The questions below are calibrated to test the specific competencies a defence digital programme will demand. Each one comes with the signal it tests, the framework a strong candidate will follow, and the red flags that should kill the application.
Q1: Describe a recent defence or government digital programme where you owned As-Is and To-Be process modelling. Walk me through how you handled stakeholder access, classification of artefacts, and delivery cadence.
The Signal: Tests whether the candidate has actually delivered inside a cleared environment, or is bluffing using commercial banking BA experience. Defence BAs handle classification splits, NPPV/SC overlays and physical site rotation that commercial BAs do not.
What a Good Answer Sounds Like: STAR structure with a named programme type, avoiding classification breach. For example: "On a Defence Digital workstream supporting CSOC standup, I owned BPMN As-Is modelling across three OFFICIAL-SENSITIVE workshops at MOD Corsham. I produced two artefact tiers, full-detail at OS-SEC for the prime, redacted at OFFICIAL for supply chain, using Sparx EA. Delivery cadence ran on a 2-week sprint with a fortnightly steering at SO1 level. Result: requirements baseline signed off four sprints ahead of milestone."
Red Flags: Generic Agile responses with no classification handling; inability to name the modelling tool; references to "the customer wanted X" without naming the customer's actual decision authority. The last one signals the BA worked through layers of subcontractors, not directly with MOD. Source: Cwjobs SC Cleared BA listings, 2026-02.
Q2: A senior officer in a discovery workshop tells you the requirement is "obvious, we just need the system to do what the existing one does." How do you handle this without losing the relationship or the requirements baseline?
The Signal: Tests the candidate's ability to challenge senior military stakeholders without breaking rank dynamics. This is the number-one failure mode on defence BA contracts: civilian BAs either capitulate (producing thin requirements that fail UAT) or push too hard (getting iced out of subsequent workshops).
What a Good Answer Sounds Like: Diplomatic challenge. "I'd acknowledge the directional input, then ask three structured questions: walk me through the current pain points your team experiences; what does 'good' look like in 12 months; which user groups have I not yet spoken to. I'd document the response, paraphrase it back, and propose a follow-up shadow session with one of the SO2/SO3 operators. The senior stays bought in, the BA gets the depth needed."
Red Flags: "I'd just document what they said" (passive, generates rubbish requirements). "I'd push back firmly" (career-ending in cleared environments). Failure to mention paraphrasing or shadowing operators. Source: H2K Infosys BA Scenario Questions, 2026-01.
Q3: How do you handle a change request mid-sprint when the change has security implications, for example moves the data scope from OFFICIAL-SENSITIVE to SECRET?
The Signal: Tests whether the candidate understands that classification escalation isn't just a scope change. It changes who can be in the room, where the work can be done, what infrastructure can host the data, and what clearance the delivery team needs. This is a defence-specific competency commercial BAs almost always miss.
What a Good Answer Sounds Like: "First action is to halt sprint progress on that artefact and escalate to the project's Security Risk Owner, typically the prime's Information Assurance lead. I'd run an impact analysis covering: clearance levels of all current contributors; physical site requirements; tooling implications such as whether Confluence stays usable or whether we move to an air-gapped wiki; and procurement timeline impact if the data now requires a different ITHC. I'd present the impact pack to the steering board with three options ranked by cost and delay, and let the customer decide."
Red Flags: Treating the change as a normal scope change. Mentioning Jira backlog refinement without mentioning the IA lead. No awareness that SECRET-level work cannot be done on standard contractor laptops. Source: GOV.UK Personnel Security Controls.
Q4: A prime contractor PM asks you to write a business case section claiming benefits the data doesn't support, to win a Treasury approval gate. What do you do?
The Signal: Tests integrity under commercial pressure. Cleared environments amplify this, since the BA's name goes on documents that face PAC scrutiny. The candidate who fudges numbers risks the prime, the programme and their own clearance.
What a Good Answer Sounds Like: "I'd push back to the PM directly with the three figures I can defend and the assumption ranges around them. I'd offer to rewrite the section in a sensitivity-analysis format, high/mid/low cases with explicit assumptions, so the Treasury reviewer can stress-test it themselves. If pressed to fabricate, I'd escalate to the prime's commercial lead and document the conversation. I'd never sign my name to numbers I can't defend in a PAC hearing."
Red Flags: "I'd just write what the PM wants" (career-ending). Failure to mention sensitivity analysis as a constructive alternative. Treating it as a purely commercial decision rather than an integrity decision. Source: techUK 2025 Year in Defence on PAC scrutiny.
Q5: Walk me through how you'd elicit, document and trace requirements across a 6-month outside-IR35 contract delivering a new operating model for a defence client, where you have only twice-weekly site access.
The Signal: Tests practical understanding of delivery economics for outside-IR35 cleared contracts. The 2-day-on-site, 3-day-remote pattern is the standard MOD delivery shape. Candidates who can't sequence elicitation around this rhythm will burn through their contract value chasing access.
What a Good Answer Sounds Like: "Front-load on-site days for elicitation workshops and shadow sessions where I need to be in the room with cleared users. Use remote days for documentation, modelling, traceability matrix maintenance, and stakeholder review prep. I'd build a single requirements catalogue in Sparx or Jira with explicit traceability, every requirement traced to a workshop, an interview, or a documented artefact. Weekly traceability snapshots to the prime PM. Monthly steering pack. By end of month 2, baseline signed off; months 3-5 deliver the To-Be model and impact assessments; month 6 transitions to the build team."
Red Flags: No mention of traceability matrix. Assuming full-time site access (signals candidate hasn't worked an outside-IR35 cleared contract before). No monthly steering rhythm. Source: Jobsite Outside IR35 SC BA contract listings, 2026-03.
Three Recruitment Obstacles Every Defence Hiring Manager Faces in 2026
Obstacle 1: The SC and DV clearance backlog
NAO data shows 72% of SC clearances now take longer than 25 days versus the 10-day target. DV clearances can take 6-9 months. UKSV's Vetting Transformation Programme was cancelled in 2024 due to cost overruns. SC backlog peaked at 27,900 cases in November 2022 and remains structurally elevated. Programme starts often slip a full quarter when sponsorship has to begin from scratch.
The workaround: Scantec maintains a live database of SC and DV cleared BA contractors with active or recently-lapsed clearance, enabling immediate-start placement rather than fresh sponsorship cycles. We track clearance expiry dates and re-engage candidates 12 months ahead of lapse.
The outcome: Defence primes that retain Scantec for cleared BA roles typically start contractors within 2-4 weeks rather than the 12-26 weeks fresh-sponsorship route demands. Source: NAO Investigation into UKSV Performance, 2023-01; Wikipedia Security Vetting UK, 2026-04.
Obstacle 2: Day rate compression versus a chronic UK digital skills shortage
Median UK BA contractor day rate is £500 (ITJobsWatch, 6 months to 23 April 2026). Cleared BA outside-IR35 roles typically pay £450-£650 with the top-end nuclear newbuild Senior BA market reaching £600-£650 inside IR35. Meanwhile, the University of Birmingham estimates the UK digital skills shortage could cost the economy £27.6 billion or 380,000 FTE jobs by end of decade, and SDR 2025 commits over £1bn additional cyber/digital defence spend. Demand is outpacing the rate cards.
The workaround: We frame roles to hiring primes around total programme cost rather than headline day rate. A £600/day cleared BA who starts in two weeks and delivers a baselined SoR by month 2 is materially cheaper than a £450/day non-cleared BA who waits four months for sponsorship and burns six weeks ramping up on classification handling.
The outcome: Primes pay the rate, but Scantec's cleared bench means the contract delivers ahead of milestone, protecting the prime's commercial position with the customer. Source: ITJobsWatch UK BA Contract Rates, April 2026; techUK on MoD Digital Excellence, 2025-11.
Obstacle 3: April 2026 Joint and Several Liability legislation
From April 2026, end-clients and recruitment agencies become jointly and severally liable for PAYE and NICs in umbrella supply chains. Many cleared BAs historically used PSC routes that are now under intensified IR35 scrutiny. Rate determinations on cleared roles are being re-issued mid-contract; some primes are reverting to inside-IR35 default to manage risk; outside-IR35 supply has tightened.
The workaround: Scantec operates compliant umbrella partnerships, tracks JSL exposure across the contractor base, and advises hiring primes on which roles can defensibly remain outside-IR35. We maintain audit-ready documentation across our SDS chain.
The outcome: Primes engaging Scantec inherit a compliance perimeter and don't have to build umbrella governance from scratch. Cleared contractors get clear-eyed status determinations rather than mid-contract surprises. Source: Scantec internal blog on JSL April 2026 umbrella regulations; ContractorUK JSL coverage.
Alternative Job Titles Cleared BA Candidates Use
The cleared BA market uses varied terminology depending on prime, sub-sector and clearance level. The titles below are what candidates actually put on LinkedIn and CVs in 2026.
- SC Cleared Business Analyst (Defence/MOD primes, the most common LinkedIn descriptor)
- DV Cleared Business Analyst (eDV/DV roles in National Security/Intelligence)
- Technical Business Analyst (Defence / Public Sector) (where the role bridges architecture and BA, common at BAE Digital Intelligence, Roke, Leidos)
- Senior Business Analyst - IT/Digital (Tier 1 prime contract roles, £600-650/day band)
- Lead Business Analyst (Defence & Security) (BAE Systems Cyber & Intelligence vernacular)
- Agile Business Analyst (Cleared) (SAFe/Scrum delivery teams)
- Requirements Engineer (Defence) (heavier systems-engineering bias, common at AWE, MBDA)
- Business Change and Engagement Analyst (used in NHS-defence digital adjacent and policing programmes, NPPV2/3 territory)
- User Researcher / BA (Defence AI) (newer hybrid role, AI programme delivery)
For the wider engineering and project services context Scantec covers, see our engineering recruitment hub.
How to Hire a Cleared Business Analyst: A 7-Step Process
Step 1: Confirm the actual clearance requirement before opening the role
Defence digital programmes routinely over-spec clearance. Asking for DV when SC suffices doubles the candidate pool restriction and adds 4-6 months to processing. A specialist recruiter cross-checks the data classifications the role will touch and benchmarks against comparable programme requirements. Going to market with the wrong clearance level is the most expensive mistake a defence hiring manager can make.
Step 2: Decide IR35 status with documented reasoning before publishing
Outside-IR35 status drives a 25-40% premium pool of contractors but requires a defensible Status Determination Statement that survives April 2026 JSL scrutiny. Inside-IR35 broadens supply but compresses access to top-tier BAs who'll simply decline the role. A specialist recruiter who knows the cleared contractor market will tell you which way to land before you publish, saving rework and exposure.
Step 3: Engage a specialist defence/cleared recruiter, not a generalist
Generalist recruiters do not maintain live SC/DV cleared databases, do not understand the AWE/Sellafield/MOD Abbey Wood programme rhythms, and route cleared BA roles through standard CV databases that are 90% non-cleared. The opportunity cost of using a generalist on a cleared BA brief is typically 8-14 weeks of lost programme delivery.
Step 4: Run a structured technical assessment, not just a competency interview
Have shortlisted candidates produce a 60-minute As-Is process model on a sanitised programme scenario, plus a 30-minute requirements traceability walkthrough. This filters CV-only candidates who have never actually owned a defence BA artefact. Specialist recruiters can usually facilitate the assessment infrastructure on the prime's behalf.
Step 5: Validate clearance currency at offer stage
Cleared candidates lose clearance if they're out of sponsored work for 12 months or spend 6+ months overseas. A candidate who claims "current SC" can still need re-sponsorship if there's been a gap. Specialist recruiters track clearance state in their database; generalists discover this at start date.
Step 6: Plan for outside-IR35 contracts in 2-week notice cycles, not 4-week corporate hiring rhythms
Cleared contractors are placed quickly because demand is high. Defence primes that take four weeks to issue offers lose their first-choice candidates to competing primes. Specialist recruiters can move a candidate from CV to mobilised contractor in 5-10 working days when clearance is live.
Step 7: Lock the clearance transfer protocol with the new sponsor before start date
Live SC/DV clearances transfer between sponsors but require new-sponsor administrative action. Failure to initiate transfer 2-3 weeks ahead of start date results in cleared candidates physically unable to enter site on day one. Specialist recruiters manage transfer paperwork end-to-end; generalists do not.
How We Build Cleared BA Shortlists for Defence Primes
1. Brief calibration with the hiring authority
We sit with the prime's capability lead or programme PM to validate the actual clearance requirement, the IR35 disposition, the day rate envelope, and the start window. We push back where the brief over-specs or where the rate doesn't match the geography.
2. Cleared bench filtering
We run the brief against our live cleared contractor database, filtering on active clearance level, last sponsorship end date, defence sector experience, and tooling proficiency. The output is a longlist of candidates we can mobilise within two weeks.
3. Structured technical screen
We screen each shortlisted contractor on a sanitised version of the prime's actual challenge: an As-Is process modelling exercise, a traceability matrix walkthrough, and a classification handling scenario. We don't send CVs that haven't passed this gate.
4. Clearance currency check
We verify clearance state with the candidate and, where permitted, with the previous sponsor. We flag any gaps that might trigger re-sponsorship requirements before the prime makes an offer.
5. Offer mobilisation and clearance transfer
We coordinate the clearance transfer with the new sponsor and the candidate, ensuring the administrative paperwork is in motion 2-3 weeks ahead of start date so the contractor can physically enter site on day one.
6. Contract compliance perimeter
We issue Status Determination Statements that hold under April 2026 JSL scrutiny, with audit-ready documentation across the contractor's PSC or umbrella arrangement. Primes inherit our compliance posture rather than building one from scratch.
7. Through-life contractor management
We track the contractor's clearance expiry, manage extension paperwork, and re-engage 12 months ahead of clearance lapse to keep the prime's bench warm for the next programme.
Frequently Asked Questions
What clearance level does a Business Analyst need for MOD work?
SC clearance is sufficient for most MOD digital BA roles, covering SECRET-level material. DV clearance is required for senior intelligence roles, AWE warhead programmes, and select MOD policy work. Asking for DV when SC suffices restricts the candidate pool and adds 4-6 months to processing. Validate the data classifications before specifying clearance level.
How quickly can Scantec mobilise a cleared BA contractor?
Defence primes that retain Scantec typically start contractors within 2-4 weeks. The fresh-sponsorship route through UKSV usually takes 12-26 weeks for SC and 6-9 months for DV. Our advantage is a live database of contractors with active or recently-lapsed clearance, removing the sponsorship wait.
Can a cleared BA contract be outside IR35 in 2026?
Yes, but the Status Determination Statement must hold under April 2026 JSL scrutiny. Outside-IR35 PSC arrangements remain viable for genuinely supervision-light, deliverable-defined contracts. Some primes have moved to inside-IR35 default; others continue outside-IR35 with rigorous SDS process. We advise on which roles can defensibly remain outside-IR35.
What do Scantec's cleared BA contractors charge in 2026?
Outside-IR35 day rates run £450-£650 for SC mid-to-senior BAs, £625-£750 for SC lead/principal, and £700-£850 for DV/eDV roles. Inside-IR35 nuclear newbuild Senior BA rates reach £600-£650. The cleared premium versus non-cleared BAs at the same experience level is typically 22-27%.
Do you cover defence BA roles outside the M4 corridor?
Per Scantec's directional steer, our cleared BA placement focuses on Reading, Oxfordshire, Southampton, and Swindon, the core M4 and south coast defence corridor where AWE, GCAP, QinetiQ, DE&S, the Defence Academy and the emerging DroneTex cluster sit. We don't currently place BAs in the North West.
Looking for a cleared Business Analyst on contract?
We mobilise SC and DV cleared BA contractors onto UK defence digital programmes in 2-4 weeks. Contact Scantec to brief us on your role.
