APS6 Business Analyst - Cyber Security
Location: Canberra, ACT; Brisbane, QLD; Melbourne, VIC; Sydney, NSW; Adelaide, SA
Contract: Up to 12 months, with extensions up to a maximum of 24 months
Pay: $100-$130 p/h including super (negotiable)
Work type: Full-time
Work arrangement: Hybrid, with specific arrangements agreed with your supervisor on a case-by-case basis
Clearance: Must hold a current NV1 clearance or above
About the Role
Join our Federal Government client as a senior Business Analyst working across cyber resilience, security remediation and compliance initiatives in a large ICT environment. You will lead complex analysis and requirements work across connected workstreams. You will bring business and technical stakeholders together, manage competing needs, maintain traceability and help teams make sound delivery decisions. The work sits within an Agile multidisciplinary environment and combines business analysis with cyber security, risk, quality and implementation activity.
What You'll Be Doing
Location: Canberra, ACT; Brisbane, QLD; Melbourne, VIC; Sydney, NSW; Adelaide, SA
Contract: Up to 12 months, with extensions up to a maximum of 24 months
Pay: $100-$130 p/h including super (negotiable)
Work type: Full-time
Work arrangement: Hybrid, with specific arrangements agreed with your supervisor on a case-by-case basis
Clearance: Must hold a current NV1 clearance or above
About the Role
Join our Federal Government client as a senior Business Analyst working across cyber resilience, security remediation and compliance initiatives in a large ICT environment. You will lead complex analysis and requirements work across connected workstreams. You will bring business and technical stakeholders together, manage competing needs, maintain traceability and help teams make sound delivery decisions. The work sits within an Agile multidisciplinary environment and combines business analysis with cyber security, risk, quality and implementation activity.
What You'll Be Doing
- Lead complex requirements elicitation and adapt your approach when information is incomplete or stakeholders disagree
- Manage requirements from discovery through prioritisation, testability, scope and change
- Build As-Is and To-Be process models, detailed user stories, data flow diagrams, use cases and test cases
- Define the business analysis approach and deliverables for medium-complexity initiatives
- Conduct current-state analysis and identify improvement opportunities
- Work with senior executives, technical specialists, business teams and external providers
- Identify cross-functional dependencies, sequencing risks and practical implementation phases
- Analyse risks, change requests and design decisions and prepare recommendations
- Coordinate quality assurance, verification, validation and defect prioritisation
- Apply cyber security policies, standards and frameworks to analysis and delivery decisions
- You've delivered cyber resilience, security remediation or compliance initiatives in a large and complex ICT environment
- You've led complex business analysis covering elicitation, requirements management, process modelling, traceability and delivery support
- You've applied cyber security frameworks and standards such as PSPF, ISM, Essential Eight or other relevant security and risk frameworks
- You can manage competing requirements and make sure they are clear, testable and traceable
- You can work effectively with senior executives, technical specialists, business representatives and external providers
- You can produce clear analysis artefacts that support scope, risk, testing and implementation decisions
- You're an Australian citizen
- You must hold a current NV1 clearance or above
- Government cyber security, infrastructure, ICT transformation or uplift experience
- Large enterprise experience across cloud, identity and access management, security operations, infrastructure, applications or data services
- Experience managing tight delivery timeframes, dependencies and competing priorities
- Ability to explain complex cyber security concepts to technical and non-technical audiences
- Experience with NIST or related security and risk frameworks