Security Business Analyst / Project Manager (Contract – Immediate starter)

Security Business Analyst / Project Manager (Contract – Immediate starter) A major retailer is looking for a Security Business Analyst / Project Manager to support a major security programme by translating information security requirements into clear, documented and traceable business, functional and technical requirements across accelerated remediation, hypercare and release. The role will work with group information security SMEs business stakeholders and delivery partners throughout the delivery lifecycle. You will maintain traceability between security risks, controls, requirements, remediation actions and supporting evidence. It will support the identification and resolution of gaps, dependencies and inconsistencies, while ensuring security requirements are appropriately documented and maintained through design, build, testing and implementation. You should apply for this role if you are/have: • Proven experience as a Business Analyst and/or Project Manager within a technology, information security, risk or large-scale transformation environment. • Strong experience gathering, analysing, documenting and managing business, functional and technical requirements through the delivery lifecycle. • Strong understanding of requirements management and end-to-end traceability, including linking requirements to risks, controls, remediation actions, acceptance criteria and evidence. • Working knowledge of information security principles, technology risk and security controls, with the ability to translate security requirements into clear delivery requirements. • Experience working across complex programmes with multiple business, technology, security and third-party stakeholders, including facilitating requirements workshops. • Strong analytical and problem-solving skills, with experience identifying gaps, dependencies and inconsistencies across requirements and delivery plans. • Strong documentation and communication skills, with experience maintaining requirements, action and decision records and communicating effectively with technical and non-technical stakeholders. • Experience in SAP, ERP or large enterprise transformation programmes, and familiarity with security frameworks such as ISO/IEC 27001 or NIST CSF, would be advantageous. You will be immediate available. This is a AED 20,000-22,000 monthly role initially for six months. Show more Show less

Proven experience as a Business Analyst and/or Project Manager within a technology, information security, risk or large-scale transformation environment. Strong experience gathering, analysing, documenting and managing business, functional and technical requirements through the delivery lifecycle. Strong understanding of requirements management and end-to-end traceability, including linking requirements to risks, controls, remediation actions, acceptance criteria and evidence. Working knowledge of information security principles, technology risk and security controls, with the ability to translate security requirements into clear delivery requirements. Experience working across complex programmes with multiple business, technology, security and third-party stakeholders, including facilitating requirements workshops. Strong analytical and problem-solving skills, with experience identifying gaps, dependencies and inconsistencies across requirements and delivery plans. Strong documentation and communication skills, with experience maintaining requirements, action and decision records and communicating effectively with technical and non-technical stakeholders. Experience in SAP, ERP or large enterprise transformation programmes, and familiarity with security frameworks such as ISO/IEC 27001 or NIST CSF, would be advantageous.

Translate information security requirements into clear, documented and traceable business, functional and technical requirements across accelerated remediation, hypercare and release. Maintain traceability between security risks, controls, requirements, remediation actions and supporting evidence. Support the identification and resolution of gaps, dependencies and inconsistencies, while ensuring security requirements are appropriately documented and maintained through design, build, testing and implementation.