Required Qualifications & Experience
- Bachelor’s degree in Business, Information Systems, Computer Science, or a related field.
Information Security Governance, Risk & Compliance (GRC) Confidential
- Business analysis certification preferred — CBAP, CCBA, PMI-PBA, or an Agile BA / Scrum credential.
- 5+ years of business-analysis experience, including delivery in GRC, risk, compliance, or information security — ideally in financial services.
- Strong requirements elicitation, process modeling (e.g., BPMN), use-case and user-story authoring.
- Experience producing BRDs, functional specifications, and requirements traceability.
- Experience supporting vendor evaluation and fit/gap analysis against documented requirements.
Technical & Domain Knowledge
- Working knowledge of GRC platforms and control frameworks (ISO 27001, NIST; awareness of central-bank regulatory expectations).
- Understanding of compliance, risk-assessment, audit-readiness, and evidence-management processes.
- Familiarity with AI/ML and NLP concepts and the data requirements that support them (preferred).
- Comfort with backlog and analysis tooling (e.g., Jira / Azure DevOps) and process-modeling tools.
Core Competencies
- Exceptional written documentation and analytical rigor with strong attention to detail.
- Skilled facilitator able to translate between business, regulatory, and technical audiences.
- Structured, requirements-led thinking and the ability to prioritize for value.
- Collaborative, proactive, and comfortable operating amid evolving requirements.
Preferred (Nice to Have)
- Experience in banking or financial services within the UAE / GCC region.
- Prior exposure to AI/ML or NLP projects and to agile delivery.
