Business Analyst, Source-to-Pay

JOB DESCRIPTION SUMMARY The Business Analyst, Source-to-Pay (S2P) supports ISOC's S2P project within the wider ERP Simplification Program led by Technology Solutions & Services (TSS). This role drives current-state and future-state mapping, systems mapping, and requirements gathering across ISOC's full vendor management lifecycle, positioning ISOC to go to market for an appropriate S2P tool and identify vendors that meet its constraints, guiding principles, and business requirements. The vendor management lifecycle spans nine stages: Demand Management, Category Management, Sourcing / Market Scan, Vendor Selection, Contracting, Onboarding, Operational Procurement, Performance / Relationship Management, and Exit / Offboarding. These stages are underpinned by two cross-cutting layers: Vendor Management Governance and Reporting, and Vendor Risk Management. The Business Analyst is embedded in the S2P project working group and supports the project team through discovery, analysis, and vendor selection preparation. The Business Analyst will ensure that business needs are translated into functional requirements and that the solution aligns with organizational objectives. KEY RESPONSIBILITIES Lifecycle Process and Systems Mapping ● Gather, analyze, document, and validate business requirements for Source-to-Pay processes. ● Map current-state and future-state processes across all nine vendor management lifecycle stages: Demand Management, Category Management, Sourcing / Market Scan, Vendor Selection, Contracting, Onboarding, Operational Procurement, Performance / Relationship Management, and Exit / Offboarding ● Develop current-state and future-state RACI matrices for each lifecycle stage, engaging with cross-functional stakeholders, including but not limited to legal and compliance, finance, TSS, project/program teams, etc. ● Conduct systems and data mapping to document how existing tools and data support or constrain each stage Governance, Reporting, and Risk (Cross-Cutting Layers) ● Map Vendor Management Governance and Reporting across the lifecycle, including approval workflows, thresholds, financial controls, segregation of duties, audit trail, and management reporting requirements ● Map Vendor Risk Management across the lifecycle, embedding third-party risk and sanctions/denied-party screening and due diligence (relevant to ISOC's OFAC and export-control obligations) into onboarding and ongoing contract and vendor management ● Capture data privacy and security (non-functional) requirements applicable to vendor and contract data across the lifecycle Requirements Gathering and Go-to-Market ● Lead requirements gathering across all lifecycle stages and cross-cutting layers to support a go-to-market process for identifying potential S2P vendors ● Translate ISOC's constraints, guiding principles, and business requirements into structured documentation vendors can respond to ● Build a requirements traceability matrix (RTM), support RFI/RFP development, and design a weighted vendor evaluation and fit-gap scoring model Stakeholder Engagement ● Facilitate stakeholder sessions across TSS, Finance, Legal and Compliance, and business owners to validate current state and align on future state ● Communicate findings and recommendations clearly to technical and non-technical audiences Project Working Group Support ● Actively participate as a member of the S2P project working group ● Support the wider project team and TSS Lead throughout the project lifecycle QUALIFICATIONS ● Demonstrated business analysis experience on procurement or ERP transformation projects, ideally S2P-specific ● Working understanding of ERP, Source-to-Contract (S2C), Procure-to-Pay (P2P) (currently SAP Concur), and the integrated Source-to-Pay (S2P) cycle, in relation to the end-to-end vendor management lifecycle ● Experience mapping governance, controls, and third-party/vendor risk into sourcing, procurement and vendor management processes ● Ability to apply enterprise-grade expertise and right-size it to a small organization's process mapping needs ● Strong stakeholder management and facilitation skills ● Strong data mapping and system mapping capability and knowledge of APIs/Integrations. ● Strong analytical, problem-solving, and communication skills. ● Experience producing process maps, RACI matrices, requirements traceability matrices, and structured requirements documentation ● Proficiency with process-mapping tools (e.g., Visio, Lucidchart) and ISOC's stack (Smartsheet, Box, Google Suite) ● Preferred: ○ Prior S2P or sourcing/procurement system selection/implementation delivery; experience with nonprofit or mission-driven organizations ○ Experience working with global procurement organizations and supplier management processes. ○ Experience using Confluence EQUAL OPPORTUNITY STATEMENT The Internet Society is an equal opportunity employer. Employment selection and related decisions are made without regard to sex, race, age, disability, religion, national origin, color, or any other protected class.