Business Analist

Benodigde opleiding: HBO

For the client, we are looking for a Business Analyst

Important:

• We are looking for 1 FTE.
• We will close the vacancy before the indicated deadline when we have received enough professionals.
• Please clearly indicate in the motivation field whether the candidate has any planned vacation or special leave during the duration of this assignment.
• Please provide in the CV whether an internal reference can be requested. If the candidate is currently working at, or has recently worked at, the client, we would appreciate receiving the name and job title of the relevant team lead.
• Language: English and Dutch mandatory.
• ZZP Allowed: No.

An experienced, strategic Business Analyst who can connect policy, risk, engineering, and emerging AI capabilities. The successful candidate combines rigorous requirements analysis with journey design, stakeholder facilitation and systems thinking, turning complex compliance expectations into clear controls, evidence models, digital journeys, and actionable delivery backlogs. Working across Adherence squads and with stakeholders including TCO/DCO, Chapter CISO, DPCOs, policy and requirement owners, solution owners and engineering teams, the Business Analyst ensures that compliance can be understood, implemented, and demonstrated through standard solutions, objective evidence, declarations, or formally approved deviations.

Experience and capabilities

1. Senior business analysis experience in regulated or technology-driven environments;

2. Strong requirements engineering, process modelling and journey-design skills;

3. Experience translating risk and policy requirements into controls and technology requirements;

4. Effective stakeholder management and workshop facilitation;

5. Strategic systems thinking combined with attention to implementation detail;

6. Working knowledge of AI, evidence, controls, and software delivery;

7. Entrepreneurial, analytical and collaborative approach;

Impact Areas:

1. Close the compliance loop;

2. Analyse policy requirements and define the appropriate compliance conclusion;

3. Extract lessons learned & possible optimizations from map requirements, approved solutions, controls, SAQ questions and evidence;

4. Align stakeholders across CISO, TCO/DCO, DPCO and Adherence;

5. Define four compliance pathways: proxy, evidence, trust, and deviation;

6. Define evidence requirements for non-standard solutions;

7. Determine evidence requirements when consumers choose non-standard solutions;

8. Gather and translate stakeholder needs into requirements, acceptance criteria, and decision points;

9. Assess risk-monitoring needs and identify gaps, dependencies, and governance issues;

10. Shape role-based Adherence journeys;

11. Design end-to-end journeys around the goals of Engineers, Solution Owners, TCOs, and other roles;

12. Develop the Engineer journey into practical micro-journeys, requirements, and work instructions;

13. Connect journeys across Adherence and supporting solutions;

14. Validate ownership and hand-offs with Adherence squads and support publication in Nexa;

15. Position Adherence as an enabler of the Agentic SDLC;

16. Define requirements for translation of policies, controls, and requirements into machine-readable context;

17. Connect AI innovations to Adherence processes and user journeys;

18. Maintain an AI-readiness backlog, use-case portfolio, and context catalogue;

19. Provide impact assessments and strategic recommendations.

Additional Information:

• All departments are working hybrid, in terms of the client @anywhere policy;
• Due to the congestion at the parking lot the client location Croeselaan in Utrecht, a new parking policy will be introduced as of April 2026. From Monday through Thursday, external staff will no longer be able to park at the Croeselaan. Parking for external staff will remain permitted on Fridays only;
• Please note: midlance constructions are not allowed according to the client policy. Do not offer candidates via this construction. This will be investigated during the screening;
• Suppliers must be aware of the laws and regulations regarding employment conditions and the client’s Collective Labour Agreement. This assignment is placed in scale 10;
• We would like to receive the personal motivation of the candidate and CV in English;
• A candidate should be submitted exclusively to the intermediary – the client during the exclusivity period of 4 business days on one request;
• Furthermore, the candidate has to be available throughout the entire duration of the assignment;
• All submitted candidates must be in possession of a valid Passport or ID card, which must be taken along to the interview and at the start of the assignment;
• Pre-employment screening: If the candidate is selected to start, a pre-employment screening will be executed. As of July 1, 2026, a new PES regulation applies. The PES is outsourced to an external party. More information can be found in Annex A. Your candidate is only allowed to start after the pre-employment screening has been completed successfully;

This agreement can be requested in advance;

IMPORTANT!:

• Complete all candidate details correctly. Enter the candidate's contact details under ‘email address and telephone number’! The same applies to the address. This is information the client needs to receive with the submission. Incomplete/incorrect submissions risk being rejected.