An Operational Risk Analyst is responsible for identifying and assessing potential harm to an organization's assets, earning potentials, or economic condition posed by operational processes. Analyzes incident reports, investigates fraudulent activities, and implements strategies to mitigate operational risks.
Security & Risk Operations Business Analyst Location:
Phoenix AZ, Irving TX, Columbus OH Onsite Role | M-F Position Summary The Security & Risk Operations Business Analyst serves as the product business analyst lead for Security and Risk Management capabilities within the ServiceNow platform. This role partners with Information Security, Risk Management, Compliance, Audit, Infrastructure , and Technology teams to identify business needs , define requirements, prioritize enhancements , and drive delivery of solutions that improve security operations , compliance effectiveness , and risk management processes. Key Responsibilities Own and prioritize the Security & Risk Operations backlog. Gather, document, and translate business requirements into epics, features, and user stories. Partner with stakeholders to identify opportunities for automation, risk reduction, and process improvement. Support delivery teams through planning, testing, implementation, and adoption activities. Ensure solutions align with regulatory, compliance, audit, and security requirements. Track business value, operational improvements, and product outcomes. Product Portfolio Products Security Operations (SecOps) Integrated Risk Management (IRM) Compliance Management Supporting Capabilities Risk Scoring & Analytics Policy & Control Library GRC Integrations Qualifications Experience as a Business Analyst, Product Analyst, or Product Owner. Strong requirements gathering and stakeholder management skills. Familiarity with security, risk, compliance, or audit processes. Experience working in Agile environments. ServiceNow SecOps or IRM experience preferred. Success Measures Backlog health and prioritization effectiveness. Delivery of security and compliance enhancements. Improved operational efficiency and automation. Enhanced risk visibility, control effectiveness, and audit readiness.