Senior ServiceNow SecOps Business Analyst

Job description / Role

Summary

We are looking for a Senior ServiceNow SecOps Business Analyst to lead requirements gathering and process design for ServiceNow Security Operations (SecOps). You will work closely with security teams, SOC analysts, and technical consultants to turn security processes into effective ServiceNow solutions across Security Incident Response, Vulnerability Response, and related modules.

Must have: Hands-on business analysis experience on ServiceNow Security Operations (SecOps) implementations. Onsite in Dubai.

Responsibilities

• Run workshops with security, SOC, and IT stakeholders to gather and document business requirements.
• Analyze current security processes and design future-state workflows in ServiceNow SecOps.
• Write clear user stories, acceptance criteria, process flows, and functional specifications.
• Map requirements to ServiceNow SecOps capabilities: Security Incident Response (SIR), Vulnerability Response (VR), Configuration Compliance, and Threat Intelligence.
• Work with technical consultants and developers to ensure solutions meet business needs.
• Support integration requirements with security tools, including SIEM, vulnerability scanners, and EDR.
• Define security KPIs, SLAs, dashboards, and reporting requirements.
• Support UAT planning and execution, training, and change management.
• Manage the backlog and prioritize requirements with product owners.
• Act as the main link between business, security, and technical teams.

Requirements

• At least 6 years of experience as a Business Analyst, including significant experience with ServiceNow.
• Required: Hands-on business analysis experience on ServiceNow SecOps (SIR and/or VR) implementations.
• Strong understanding of security operations processes, including incident response, vulnerability management, threat intelligence, and SOC workflows.
• Knowledge of security frameworks such as NIST, ISO 27001, and MITRE ATT&CK.
• Experience writing user stories and functional specifications in Agile environments, using tools such as Jira or ServiceNow Agile.
• Familiarity with security tools such as Splunk, QRadar, Microsoft Sentinel, Qualys, Tenable, Rapid7, or CrowdStrike.
• Excellent communication, workshop facilitation, and stakeholder management skills.
• Bachelor’s degree in IT, Computer Science, Information Security, or a related field.

Nice to have

• ServiceNow certifications: CSA, CIS – Security Incident Response, or CIS – Vulnerability Response.
• Business analysis certifications such as CBAP, CCBA, or PMI-PBA.
• Experience in banking, government, or other regulated sectors in the UAE or GCC.
• Arabic language skills.