Business Analyst – Data Security & Governance

Quantori·Удалённо·сегодня

Analyze and document business and scientific workflows involving externally licensed data
Map end-to-end data flows, including data sources, databases, integrations, analytical tools, and downstream systems
Gather and document business, functional, non-functional, data governance, and security requirements
Work with stakeholders to define data access rules, user permissions, licensing restrictions, and entitlement requirements
Assess existing authentication, authorization, and database access-control processes to identify gaps and improvement opportunities
Define requirements for fine-grained data access controls, including row-level and column-level security, data masking, and policy-based access
Document data lifecycle requirements, including retention, expiration, revocation, deletion, and auditability
Identify dependencies and assess the impact of proposed changes on existing systems, integrations, and business processes
Translate complex business and technical needs into structured documentation and prioritized requirements with acceptance criteria
Collaborate with technical teams to define Proof of Concept (POC) scenarios, success criteria, and validation requirements
Facilitate workshops and stakeholder discussions

Strong experience as a Business Analyst on complex data, data security, integration, or regulated-environment projects
Experience working in the Life Sciences, pharmaceutical, biotechnology, or scientific research domains
Hands-on experience gathering, analyzing, and documenting business, functional, and non-functional requirements, including data, security, and governance requirements
Good understanding of relational databases, SQL concepts, data structures, schemas, and data flows
Understanding of data security principles, including Identity and Access Management (IAM), authentication, authorization, user roles, and permissions
Familiarity with fine-grained access-control and authentication concepts, such as row-level security, column-level security, data masking, policy-based access, and token-based authentication (e.g., OAuth, OIDC)
Experience documenting data flows, data lineage, system dependencies, lifecycle and retention controls, audit requirements, and deletion obligations
Ability to translate complex business, licensing, and regulatory requirements into clear, structured, and testable specifications
Strong analytical thinking, problem-solving, communication, and technical writing skills
Experience facilitating workshops and managing business and technical stakeholders
Strong English communication skills

Familiarity with scientific data workflows and externally licensed datasets
Understanding of data licensing agreements, intellectual property protection, and data usage restrictions
Experience working with enterprise data platforms, data catalogs, or data governance solutions
Experience supporting Proof of Concept (POC) initiatives and evaluating technical solutions against business requirements
Experience working in regulated environments with complex data security and compliance requirements