What are the responsibilities and job description for the Security & Risk Operations Business Analyst position at AgreeYa Solutions?
Job Title: Security & Risk Operations Business Analyst
Location: Phoenix AZ, Irving TX, Columbus OH
Onsite Role | M-F
Position Summary
The Security & Risk Operations Business Analyst serves as the product business analyst lead for Security and Risk Management capabilities within the ServiceNow platform. This role partners with Information Security, Risk Management, Compliance, Audit, Infrastructure, and Technology teams to identify business needs, define requirements, prioritize enhancements, and drive delivery of solutions that improve security operations, compliance effectiveness, and risk management processes.
Key Responsibilities
- Own and prioritize the Security & Risk Operations backlog.
- Gather, document, and translate business requirements into epics, features, and user stories.
- Partner with stakeholders to identify opportunities for automation, risk reduction, and process improvement.
- Support delivery teams through planning, testing, implementation, and adoption activities.
- Ensure solutions align with regulatory, compliance, audit, and security requirements.
- Track business value, operational improvements, and product outcomes.
Product Portfolio
Products
- Security Operations (SecOps)
- Integrated Risk Management (IRM)
- Compliance Management
Supporting Capabilities
- Risk Scoring & Analytics
- Policy & Control Library
- GRC Integrations
Qualifications
- Experience as a Business Analyst, Product Analyst, or Product Owner.
- Strong requirements gathering and stakeholder management skills.
- Familiarity with security, risk, compliance, or audit processes.
- Experience working in Agile environments.
- ServiceNow SecOps or IRM experience preferred.
Success Measures
- Backlog health and prioritization effectiveness.
- Delivery of security and compliance enhancements.
- Improved operational efficiency and automation.
- Enhanced risk visibility, control effectiveness, and audit readiness.