Business Analyst - Risk & Data Governance

• Direct Client Requirement
• Job Title: Business Analysis - Risk & Data Governance
• Location: REMOTE
• Type: Contract

Leads enterprise business analysis, process diagnostics, and governance assessment, translating complex M365 workflows, cross-tenant dependencies, and compliance gaps into quantified financial impact, risk exposure, and actionable transformation insights aligned to Core Modernization objectives.

• Key Responsibilities
• 1. Enterprise Business Analysis & Process Diagnostics
• Lead end-to-end workflow mapping (intake → fulfillment → closure) across M365 and adjacent services
• Conduct structured analysis using: BPMN, UML (use case, activity, sequence diagrams) and Data flow and logical data models
• Perform As-Is / To-Be analysis to identify: Operational inefficiencie, h andoff gaps and process fragmentation and Automation opportunities
• 2. Governance, Compliance & Risk Analysis
• Perform ISO-aligned governance and compliance assessments:
• ISO 27001 / 27701 / 42001
• NIST framework mapping
• Conduct: Privacy Impact Assessments (PIA) and Threat & Risk Assessments (TRA)
• Develop: Enterprise risk register (likelihood, impact, financial exposure)
• Control effectiveness and audit readiness assessments
• 3. M365 & Multi-Tenant Governance Analysis
• Assess M365 governance maturity, including:
• Data lifecycle management
• Configuration and policy compliance
• Platform health and audit readiness
• Support AMM (Advanced Management for M365) assessments:
• Evaluate governance, lifecycle, and policy alignment
• Analyze Multi-Tenant Governance (MTG) models:
• Global vs local policy structures
• Cross-tenant data classification and access controls
• Identify: Governance inconsistencies, Manual controls and enforcement gaps and Data fragmentation and duplication risks
• 4. Financial & Operational Impact Modeling
• Quantify: Collaboration waste (time, effort, rework)
• Rework sinkholes and fulfillment delays
• Risk & value leakage
• Translate findings into: FTE capacity loss, financial exposure and cost-of-inaction models
• Support traceability of calculations to: Service logs, Incident data, Stakeholder input
• 5. KPI, Reporting & Data-Driven Insights
• Define KPI frameworks aligned to operational performance, including:
• Fulfillment cycle time
• First-pass success rates
• Audit readiness metrics
• Design and facilitate: Interactive KPI reviews
• Dashboard-driven insights using Power BI / Tableau
• Enable: Real-time monitoring
• Intervention trigger definition
• 6. Business Case & Transformation Enablement
• Contribute to: Strategic investment business case, ROI and FTE optimization model
• Support: AI readiness assessments (data trust, governance, auditability)
• Provide structured inputs into: Transformation roadmap, Prioritized recommendations

• Key Deliverables Accountability
• End-to-end workflow maps (BPMN/UML-based)
• Technology and data flow analysis (as-is state)
• ISO/NIST-aligned risk register and impact model
• M365 governance maturity assessment (AMM + MTG aligned)
• KPI framework and dashboard requirements
• Financial impact and FTE loss model
• Analytical inputs into business case and roadmap

• Core Capabilities
• Business Analysis & Process Excellence
• 12+ years enterprise business analysis and process re-engineering experience
• Advanced modeling: BPMN, UML, data flow diagrams
• Requirements management: BRDs, user stories, backlog grooming
• Governance, Risk & Compliance
• ISO 27001 / 27701 / 42001 gap analysis
• NIST framework alignment
• PIA / TRA execution and audit readiness
• M365 & Data Governance (Functional Depth)
• AMM365 governance assessment experience
• MTG (multi-tenant governance) modeling
• Experience with governance tools (e.g., AvePoint)
• Data, Reporting & Financial Insight
• KPI definition and dashboard reporting (Power BI, Tableau)
• Financial and operational impact modeling
• SQL/data validation and analytics

• Delivery & Methodology
• Agile (Scrum/SAFe), Waterfall, Lean Six Sigma
• Stakeholder facilitation and workshop leadership
• Cross-functional coordination and requirements translation