About the Role
We are looking for a Senior ServiceNow SecOps Business Analyst to lead requirements gathering and process design for ServiceNow Security Operations (SecOps). In this role, you will work closely with security teams, SOC analysts, and technical consultants to turn security processes into effective ServiceNow solutions across Security Incident Response, Vulnerability Response, and related modules.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
Responsibilities
- Run workshops with security, SOC, and IT stakeholders to gather and document business requirements.
- Analyse current security processes and design future-state workflows in ServiceNow SecOps.
- Write clear user stories, acceptance criteria, process flows, and functional specifications.
- Map requirements to ServiceNow SecOps capabilities: Security Incident Response (SIR), Vulnerability Response (VR), Configuration Compliance, and Threat Intelligence.
- Work with technical consultants and developers to ensure solutions meet business needs.
- Support integration requirements with security tools (SIEM, vulnerability scanners, EDR).
- Define security KPIs, SLAs, dashboards, and reporting requirements.
- Support UAT planning and execution, training, and change management.
- Manage the backlog and prioritize requirements with product owners.
- Act as the main link between business, security, and technical teams.
Requirements
- 6+ years of experience as a Business Analyst, including significant experience on ServiceNow.
- Hands-on business analysis experience on ServiceNow SecOps (SIR and/or VR) implementations is essential.
- Strong understanding of security operations processes: incident response, vulnerability management, threat intelligence, and SOC workflows.
- Knowledge of security frameworks such as NIST, ISO 27001, and MITRE ATT&CK.
- Experience writing user stories and functional specifications in Agile environments (Jira, ServiceNow Agile).
- Familiarity with security tools such as Splunk, QRadar, Microsoft Sentinel, Qualys, Tenable, Rapid7, or CrowdStrike.
- Excellent communication, workshop facilitation, and stakeholder management skills.
- Bachelor’s degree in IT, Computer Science, Information Security, or a related field.
Nice to Have
- ServiceNow certifications: CSA, CIS – Security Incident Response, CIS – Vulnerability Response.
- Business analysis certifications (CBAP, CCBA, PMI-PBA).
- Experience in banking, government, or other regulated sectors in the UAE/GCC.
- Arabic language skills.
Contract and Location
- This is an onsite role based in Dubai.
