Business Analysis

Michael Page; Sydney; Hybrid; AUD 120,000 - 160,000; Full time

Benefits offered by this job

Competitive day-rate

Hybrid work arrangements

Temporary assignments in Sydney

Job summary

Michael Page is assisting a leading global technology consultancy based in Sydney to recruit a Business Analyst focused on Secure Coding and Application Security. You will drive enterprise-scale security initiatives, work with multiple teams to embed secure coding practices, and lead the rollout of SAST tools across a large environment.

The role emphasizes gathering business requirements, facilitating training, and ensuring security requirements align with business objectives, with hybrid work

Qualifications

• Proven experience as a Business Analyst delivering enterprise-scale Application Security or DevSecOps initiatives.
• Hands-on involvement in rollout of SAST tools such as Snyk, Fortify, Checkmarx, Veracode or similar platforms.
• Strong experience gathering and documenting business requirements, user stories, process maps, and functional specifications.
• Track record of working with Security, Development, Architecture, and DevOps teams within complex enterprise environments.
• Experience supporting UAT, stakeholder engagement, training, change management, and go-live activities.

Responsibilities

• Analyse and document secure coding requirements for application development projects.
• Collaborate with development teams to ensure security best practices are integrated into the software lifecycle.
• Conduct risk assessments and identify vulnerabilities in software applications.
• Provide recommendations and strategies to mitigate security risks.
• Facilitate workshops and training sessions on secure coding practices.
• Develop and maintain documentation related to application security standards.
• Work with stakeholders to ensure security requirements align with business objectives.
• Monitor and report on the effectiveness of implemented security measures.

Skills

Security requirements gathering

Stakeholder management

UAT support

DevSecOps collaboration

Training delivery

Tools

Snyk

Fortify

Checkmarx

Veracode

Job description

• Analyse and document secure coding requirements for application development projects.
• Collaborate with development teams to ensure security best practices are integrated into the software lifecycle.
• Conduct risk assessments and identify vulnerabilities in software applications.
• Provide recommendations and strategies to mitigate security risks.
• Facilitate workshops and training sessions on secure coding practices.
• Develop and maintain documentation related to application security standards.
• Work closely with stakeholders to ensure security requirements align with business objectives.
• Monitor and report on the effectiveness of implemented security measures.

Key responsibilities:

• Analyse and document secure coding requirements for application development projects.
• Collaborate with development teams to ensure security best practices are integrated into the software lifecycle.
• Conduct risk assessments and identify vulnerabilities in software applications.
• Provide recommendations and strategies to mitigate security risks.
• Facilitate workshops and training sessions on secure coding practices.
• Develop and maintain documentation related to application security standards.
• Work closely with stakeholders to ensure security requirements align with business objectives.
• Monitor and report on the effectiveness of implemented security measures.

Lead the rollout of leading application security tools at scale.Drive secure coding transformation across a complex enterprise.

A successful Business Analyst - Secure Coding & Application Security should have:

• Proven experience as a Business Analyst delivering enterprise-scale Application Security, Secure Coding, or DevSecOps initiatives.
• Hands-on involvement in the rollout of SAST tools such as Snyk, Fortify, Checkmarx, Veracode, or similar platforms.
• Strong experience gathering and documenting business requirements, user stories, process maps, and functional specifications.
• A track record of working closely with Security, Development, Architecture, and DevOps teams within complex enterprise environments.
• Experience supporting UAT, stakeholder engagement, training, change management, and go-live activities to drive successful adoption.
• Excellent communication and stakeholder management skills, with the ability to bridge the gap between technical and non-technical teams.

Our client is a leading global technology consultancy delivering large-scale digital transformation and technology programs for enterprise organisations, based in Sydney.

• Competitive day-rate.
• working hybrid arrangements.
• Opportunity to work on temporary assignments in Sydney's thriving technology sector.