An experienced, strategic Business Analyst who can connect policy, risk, engineering, and emerging AI capabilities. The successful professional combines rigorous requirements analysis with journey design, stakeholder facilitation and systems thinking, turning complex compliance expectations into clear controls, evidence models, digital journeys, and actionable delivery backlogs. Working across Adherence squads and with stakeholders including TCO/DCO, Chapter CISO, DPCOs, policy and requirement owners, solution owners and engineering teams, the Business Analyst ensures that compliance can be understood, implemented, and demonstrated through standard solutions, objective evidence, declarations, or formally approved deviations.
Werkzaamheden
- Close the compliance loop
- Analyse policy requirements and define the appropriate compliance conclusion.
- Extract lessons learned & possible optimizations from map requirements, approved solutions, controls, SAQ questions and evidence.
- Align stakeholders across CISO, TCO/DCO, DPCO and Adherence.
- Define four compliance pathways: proxy, evidence, trust, and deviation.
- Define evidence requirements for non-standard solutions
- Determine evidence requirements when consumers choose non-standard solutions.
- Gather and translate stakeholder needs into requirements, acceptance criteria, and decision points.
- Assess risk-monitoring needs and identify gaps, dependencies, and governance issues.
- Shape role-based Adherence journeys
- Design end-to-end journeys around the goals of Engineers, Solution Owners, TCOs, and other roles.
- Develop the Engineer journey into practical micro-journeys, requirements, and work instructions.
- Connect journeys across Adherence and supporting solutions.
- Validate ownership and hand-offs with Adherence squads and support publication in Nexa.
- Position Adherence as an enabler of the Agentic SDLC.
- Define requirements for translation of policies, controls, and requirements into machine-readable context.
- Connect AI innovations to Adherence processes and user journeys.
- Maintain an AI-readiness backlog, use-case portfolio, and context catalogue.
- Provide impact assessments and strategic recommendations.