Security Business Analyst (Ref: 198075)

🚨 Security Business Analyst – Contract Opportunity | UAE 🚨 I’m currently supporting a leading organisation in the UAE with the appointment of an experienced Security Business Analyst to join a major enterprise security and transformation programme. The role will sit at the intersection of Information Security, Technology and Business Transformation, translating security requirements into clear business, functional and technical requirements and ensuring full traceability throughout the delivery lifecycle. Key responsibilities: • Gather, analyse and document information security requirements • Translate security requirements into clear business, functional and technical requirements • Facilitate workshops with security SMEs, technology teams and business stakeholders • Maintain end-to-end traceability across security risks, controls, requirements, remediation actions and supporting evidence • Define acceptance criteria and evidence requirements • Identify gaps, dependencies and inconsistencies across requirements and delivery plans • Support security remediation planning, governance and reporting • Maintain requirements throughout design, build, testing and implementation What we’re looking for: • Strong Business Analyst experience within Technology, Information Security, Risk or large-scale Transformation • Good understanding of information security principles, technology risk and security controls • Strong requirements gathering, documentation and requirements-management experience • Experience working across complex programmes involving multiple business, technology and third-party stakeholders • Strong stakeholder management, workshop facilitation and communication skills • Experience within SAP, ERP or major enterprise transformation programmes would be advantageous • Knowledge of ISO 27001 and/or NIST CSF would also be beneficial Show more Show less

Strong Business Analyst experience within Technology, Information Security, Risk or large-scale Transformation. Good understanding of information security principles, technology risk and security controls. Strong requirements gathering, documentation and requirements-management experience. Experience working across complex programmes involving multiple business, technology and third-party stakeholders. Strong stakeholder management,Workshop facilitation and communication skills. Experience within SAP, ERP or major enterprise transformation programmes would be advantageous. Knowledge of ISO 27001 and/or NIST CSF would also be beneficial.

Gather, analyse and document information security requirements; Translate security requirements into clear business, functional and technical requirements; Facilitate workshops with security SMEs, technology teams and business stakeholders; Maintain end-to-end traceability across security risks, controls, requirements, remediation actions and supporting evidence; Define acceptance criteria and evidence requirements; Identify gaps, dependencies and inconsistencies across requirements and delivery plans; Support security remediation planning, governance and reporting; Maintain requirements throughout design, build, testing and implementation.