Senior Security Business Analyst – SAP ERP Transformation

Yallo Group; Dubai; Hybrid; AED 300,000 - 420,000; Full time

Job summary

Yallo invites a Senior Security Business Analyst to join a Dubai-based SAP ERP transformation within a major retail client. You will sit in the security workstream, turning security requirements into clear business and technical specifications, maintaining traceability from design through go-live.

This role suits an independent BA who runs workshops confidently and communicates clearly with technical and non-technical audiences.

Qualifications

• 6–10 years as a Business Analyst, including 2–3 years on security, technology risk or GRC projects.
• Strong requirements management and traceability across the full delivery lifecycle.
• Working knowledge of security controls and ability to translate security conversations.
• Experience on complex programmes with many business, technology and third-party stakeholders.
• Structured and detail-focused, able to manage a large volume of requirements and actions accurately.
• Clear written and verbal communication with both technical and non-technical audiences.
• SAP or ERP programme experience; familiarity with ISO 27001 or NIST CSF is an advantage.

Responsibilities

• Run workshops with security specialists, business stakeholders and delivery partners to gather and clarify requirements.
• Turn security requirements into clear business, functional and technical requirements, each with acceptance criteria.
• Keep end-to-end traceability between risks, controls, requirements, remediation actions and evidence.
• Track evidence submissions and map each one to the right requirement or control before it goes for assurance.
• Maintain action registers, decision logs, dependencies and milestones for the security remediation plan.
• Spot gaps, inconsistencies and dependencies early, and drive them to resolution.
• Prepare workstream reports and governance material.

Skills

Requirements management

Traceability

Security terminology

Stakeholder management

Communication

ERP awareness

Tools

SAP ERP

Job description

Job Title: Senior Security Business Analyst – SAP ERP Transformation
Job Location: Dubai, UAE (on-site/hybrid)
Job Type: 12-month contract, renewable

About the role:

Yallo is hiring a Senior Security Business Analyst for a leading Dubai-based retail group client. The client is running a major SAP ERP transformation. You will sit in the programme’s security workstream and turn security requirements into clear, traceable business and technical requirements. You'll keep every risk, control, action and piece of evidence linked from design through to go-live.

This role suits a BA who works independently, runs workshops with confidence and is comfortable with security terminology.

What you’ll do:

• Run workshops with security specialists, business stakeholders and delivery partners to gather and clarify requirements

• Turn security requirements into clear business, functional and technical requirements, each with acceptance criteria

• Keep end-to-end traceability between risks, controls, requirements, remediation actions and evidence

• Track evidence submissions and map each one to the right requirement or control before it goes for assurance

• Maintain action registers, decision logs, dependencies and milestones for the security remediation plan

• Spot gaps, inconsistencies and dependencies early, and drive them to resolution

• Prepare workstream reports and governance material

What you’ll bring:

• 6–10 years as a Business Analyst, including at least 2–3 years on security, technology risk or GRC projects

• Strong requirements management and traceability skills across the full delivery lifecycle

• Working knowledge of security controls and principles, so you can follow security conversations and translate them

• Experience on complex programmes with many business, technology and third-party stakeholders

• Structured and detail-focused, able to manage a large volume of requirements and actions accurately

• Clear written and verbal communication with both technical and non-technical audiences

• SAP or ERP programme experience, and familiarity with ISO 27001 or NIST CSF, are an advantage