ummary
We are looking for a Senior ServiceNow SecOps Business Analyst to lead requirements gathering and process design for ServiceNow Security Operations (SecOps). You will work closely with security teams, SOC analysts and technical consultants to turn security processes into effective ServiceNow solutions across Security Incident Response, Vulnerability Response and related modules.

⚠️ Must Have: Hands-on business analysis experience on ServiceNow Security Operations (SecOps) implementations. Onsite in Dubai.

Responsibilities

• Run workshops with security, SOC and IT stakeholders to gather and document business requirements.
• Analyse current security processes and design future-state workflows in ServiceNow SecOps.
• Write clear user stories, acceptance criteria, process flows and functional specifications.
• Map requirements to ServiceNow SecOps capabilities: Security Incident Response (SIR), Vulnerability Response (VR), Configuration Compliance and Threat Intelligence.
• Work with technical consultants and developers to make sure solutions meet business needs.
• Support integration requirements with security tools (SIEM, vulnerability scanners, EDR).
• Define security KPIs, SLAs, dashboards and reporting requirements.
• Support UAT planning and execution, training and change management.
• Manage the backlog and prioritise requirements with product owners.
• Act as the main link between business, security and technical teams.

Requirements

• 6+ years of experience as a Business Analyst, including significant experience on ServiceNow.
• Must: Hands-on business analysis experience on ServiceNow SecOps (SIR and/or VR) implementations.
• Strong understanding of security operations processes: incident response, vulnerability management, threat intelligence, SOC workflows.
• Knowledge of security frameworks such as NIST, ISO 27001 and MITRE ATT&CK.
• Experience writing user stories and functional specifications in Agile environments (Jira, ServiceNow Agile).
• Familiarity with security tools such as Splunk, QRadar, Microsoft Sentinel, Qualys, Tenable, Rapid7 or CrowdStrike.
• Excellent communication, workshop facilitation and stakeholder management skills.
• Bachelor’s degree in IT, Computer Science, Information Security or a related field.

Nice to Have

• ServiceNow certifications: CSA, CIS – Security Incident Response, CIS – Vulnerability Response.
• Business analysis certifications (CBAP, CCBA, PMI-PBA).
• Experience in banking, government or other regulated sectors in the UAE/GCC.
• Arabic language skills.