Senior ServiceNow SecOps Business Analyst

We are looking for a Senior Service Now Sec Ops Business Analyst to lead requirements gathering and process design for Service Now Security Operations (Sec Ops). You will work closely with security teams, SOC analysts and technical consultants to turn security processes into effective Service Now solutions across Security Incident Response, Vulnerability Response and related modules.

Hands-on business analysis experience on Service Now Security Operations (Sec Ops) implementations. Onsite in Dubai.

• Run workshops with security, SOC and IT stakeholders to gather and document business requirements.
• Analyse current security processes and design future-state workflows in Service Now Sec Ops.
• Write clear user stories, acceptance criteria, process flows and functional specifications.
• Map requirements to Service Now Sec Ops capabilities:
  Security Incident Response (SIR), Vulnerability Response (VR), Configuration Compliance and Threat Intelligence.
• Work with technical consultants and developers to make sure solutions meet business needs.
• Support integration requirements with security tools (SIEM, vulnerability scanners, EDR).
• Define security KPIs, SLAs, dashboards and reporting requirements.
• Support UAT planning and execution, training and change management.
• Manage the backlog and prioritise requirements with product owners.
• Act as the main link between business, security and technical teams.

• 6+ years of experience as a Business Analyst, including significant experience on Service Now.
• Must: Hands-on business analysis experience on Service Now Sec Ops (SIR and/or VR) implementations.
• Strong understanding of security operations processes: incident response, vulnerability management, threat intelligence, SOC workflows.
• Knowledge of security frameworks such as NIST, ISO 27001 and MITRE ATT&CK.
• Experience writing user stories and functional specifications in Agile environments (Jira, Service Now Agile).
• Familiarity with security tools such as Splunk, QRadar, Microsoft Sentinel, Qualys, Tenable, Rapid7 or Crowd Strike.
• Excellent communication, workshop facilitation and stakeholder management skills.
• Bachelor’s degree in IT, Computer Science, Information Security or a related field.

• Service Now certifications: CSA, CIS – Security Incident Response, CIS – Vulnerability Response.
• Business analysis certifications (CBAP, CCBA, PMI-PBA).
• Experience in banking, government or other regulated sectors in the UAE/GCC.
• Arabic language skills.