Security Business Analyst: Turn Risk into Ready Requirements

Client of Forsyth Barnes; Dubai; On-site; AED 180,000 - 260,000; Full time

Job summary

Client of Forsyth Barnes is seeking a Security Business Analyst to define and maintain security requirements across business and technology change initiatives. You will link business stakeholders, delivery teams and security specialists to create clear, testable requirements and evidence traces throughout the lifecycle.

The role emphasizes disciplined documentation, effective stakeholder engagement and early embedding of security requirements in design and build activity within a complex retail

Qualifications

• Substantial experience as a Business Analyst within information security, risk, enterprise transformation or similar delivery environment.
• Proven ability to gather, analyse, validate and control requirements across the full change lifecycle.
• Strong knowledge of requirements traceability and linking risks, controls, and evidence.

Responsibilities

• Lead discovery, analysis and documentation of security-related business, functional and technical requirements.
• Convert risk assessments and security objectives into testable, actionable requirements.
• Plan and facilitate structured workshops with business owners and security specialists.
• Establish clear acceptance criteria for design, testing and implementation.
• Maintain complete traceability across risks, controls, requirements and assurance evidence.
• Review proposed solutions to ensure security expectations are addressed.

Skills

Requirements gathering

Stakeholder engagement

Documentation

Workshops facilitation

Tools

ISO 27001

NIST CSF

Job description

Client of Forsyth Barnes is seeking a Security Business Analyst to define and maintain security requirements across business and technology change initiatives. You will link business stakeholders, delivery teams and security specialists to create clear, testable requirements and evidence traces throughout the lifecycle.

The role emphasizes disciplined documentation, effective stakeholder engagement and early embedding of security requirements in design and build activity within a complex retail