Business Analyst BCM

Business Analyst BCM Role purposeWe are seeking a Product / Business Analyst to define, validate, and improve a Business Continuity Management (BCM) software solution. You will bridge BCM practitioners, customers, product, UX, engineering, QA, and implementation teams—turning resilience, regulatory, and operational needs into clear, scalable product capabilities.The ideal candidate combines strong enterprise business-analysis skills with practical understanding of BIA, BCP, crisis management, disaster recovery, BCM exercises, recovery objectives, and resilience reporting.Key responsibilitiesGather, analyze, prioritize, and document requirements from customers, BCM specialists, internal stakeholders, and delivery teams.Translate needs into epics, user stories, acceptance criteria, process flows, business rules, data requirements, and non-functional requirements.Manage and refine the product backlog with the Product Manager; identify dependencies, gaps, risks, and edge cases before development.Define and improve BCM workflows covering BIA, recovery objectives such as RTO/RPO/MTPD, dependency mapping, continuity plans, crisis management, exercises, corrective actions, audits, and compliance evidence.Define calculation logic, scoring models, thresholds, recovery priorities, approvals, workflow rules, and dashboard/reporting KPIs.Conduct customer discovery sessions, workshops, demonstrations, design reviews, fit-gap assessments, and UAT.Partner with UX/UI to design intuitive, role-based BCM workflows for assessors, plan owners, approvers, crisis teams, auditors, and executives.Ensure enterprise usability requirements, including configurable templates, notifications, localization, Arabic/English support, bulk updates, imports, integrations, and reduced manual data entry.Define UAT scenarios and functional test cases; support sprint planning, backlog grooming, demos, defect triage, release validation, and release documentation.Work with engineering and QA to validate permissions, business rules, calculations, audit trails, approvals, notifications, reports, and data integrity.Define requirements for RBAC, delegated approvals, segregation of duties, auditability, record retention, multi-tenant isolation, organization hierarchy, and role-based access.Support alignment with ISO 22301 and relevant Saudi/GCC compliance, data-residency, privacy, cybersecurity, and governance requirements.Required qualificationsBachelor’s degree in Business, Information Systems, Computer Science, Engineering, Risk Management, or a related discipline.4+ years of experience as a Business Analyst, Product Analyst, Product Owner, Implementation Consultant, or similar role in enterprise SaaS, GRC, risk, resilience, cybersecurity, or workflow products.Strong experience gathering, documenting, validating, and prioritizing functional and non-functional requirements.Working knowledge of BCM, including BIA, BCP, crisis management, disaster recovery, RTO, RPO, BCM exercises, and corrective actions.Experience producing user stories, acceptance criteria, process maps, workflow diagrams, functional specifications, and UAT test cases.Experience working in Agile delivery environments using Jira, Azure DevOps, Confluence, Notion, Miro, Figma, or equivalent tools.Strong analytical skills, particularly in business rules, assessment scoring, calculation logic, reporting, data models, and approval workflows.Excellent written and verbal English communication skills; Arabic is strongly preferred.Ability to collaborate effectively with senior business stakeholders, domain experts, designers, engineers, and QA teams.Preferred qualificationsExperience with BCM, GRC, ERM, operational resilience, internal audit, disaster recovery, or compliance software.Familiarity with ISO 22301, ISO 31000, ISO 27001, NIST, BCI Good Practice Guidelines, DRI practices, or similar frameworks.Experience in Saudi Arabia or GCC enterprise environments, especially regulated industries.Knowledge of SSO, SAML, OAuth/OIDC, RBAC, audit logs, and enterprise integration patterns.Familiarity with REST APIs, Microsoft 365, SharePoint, Power Automate, Microsoft Teams, CMDBs, HR systems, ERP systems, or ticketing platforms.Relevant certifications such as CBAP, CCBA, PMI-PBA, Scrum/Agile, ISO 22301 Lead Implementer/Auditor, CBCI, or DRI certifications.