Business Analyst – Data Security & Governance

We are looking for an experienced Business Analyst to join our team and contribute to a data security and governance initiative within the Life Sciences domain. In this role, you will work closely with business stakeholders, scientific teams, data owners, and technical specialists to analyze how externally licensed data is accessed, stored, processed, shared, and managed throughout its lifecycle. Your focus will be gathering and translating business, data governance, licensing, and security needs into clear, testable requirements for controls at the data and database layer.

Responsibilities

• Analyze and document business and scientific workflows involving externally licensed data

• Map end-to-end data flows, including data sources, databases, integrations, analytical tools, and downstream systems

• Gather and document business, functional, non-functional, data governance, and security requirements

• Work with stakeholders to define data access rules, user permissions, licensing restrictions, and entitlement requirements

• Assess existing authentication, authorization, and database access-control processes to identify gaps and improvement opportunities

• Define requirements for fine-grained data access controls, including row-level and column-level security, data masking, and policy-based access

• Document data lifecycle requirements, including retention, expiration, revocation, deletion, and auditability

• Identify dependencies and assess the impact of proposed changes on existing systems, integrations, and business processes

• Translate complex business and technical needs into structured documentation and prioritized requirements with acceptance criteria

• Collaborate with technical teams to define Proof of Concept (POC) scenarios, success criteria, and validation requirements

• Facilitate workshops and stakeholder discussions

Requirements

• Strong experience as a Business Analyst on complex data, data security, integration, or regulated-environment projects

• Experience working in the Life Sciences, pharmaceutical, biotechnology, or scientific research domains

• Hands-on experience gathering, analyzing, and documenting business, functional, and non-functional requirements, including data, security, and governance requirements

• Good understanding of relational databases, SQL concepts, data structures, schemas, and data flows

• Understanding of data security principles, including Identity and Access Management (IAM), authentication, authorization, user roles, and permissions

• Familiarity with fine-grained access-control and authentication concepts, such as row-level security, column-level security, data masking, policy-based access, and token-based authentication (e.g., OAuth, OIDC)

• Experience documenting data flows, data lineage, system dependencies, lifecycle and retention controls, audit requirements, and deletion obligations

• Ability to translate complex business, licensing, and regulatory requirements into clear, structured, and testable specifications

• Strong analytical thinking, problem-solving, communication, and technical writing skills

• Experience facilitating workshops and managing business and technical stakeholders

• Strong English communication skills

Nice to have

• Familiarity with scientific data workflows and externally licensed datasets

• Understanding of data licensing agreements, intellectual property protection, and data usage restrictions

• Experience working with enterprise data platforms, data catalogs, or data governance solutions

• Experience supporting Proof of Concept (POC) initiatives and evaluating technical solutions against business requirements

• Experience working in regulated environments with complex data security and compliance requirements

We offer

• Competitive compensation

• Remote work

• Flexible working hours

• Continuous education, mentoring, and professional development programs

• A team with excellent tech expertise