Business Analysis

Michael Page; Sydney; On-site; AUD 148,000 - 221,000; Full time

Benefits offered by this job

Hybrid work arrangements

Job summary

Michael Page in Sydney is seeking a Business Analyst focused on Secure Coding and Application Security to drive the rollout of secure coding practices across the organisation. You will collaborate with Security, Development, and DevOps teams to gather requirements and ensure successful adoption of secure methodologies.

The role requires experience delivering enterprise-scale security initiatives and hands-on rollout of SAST tools, with strong stakeholder management and UAT support.

Qualifications

• Proven experience delivering enterprise-scale Application Security, Secure Coding, or DevSecOps initiatives.
• Hands-on rollout experience with SAST tools (Snyk, Fortify, Checkmarx, Veracode) in modern software pipelines.
• Strong ability to gather and document business requirements, user stories, process maps, and functional specifications.
• Track record partnering with Security, Development, Architecture, and DevOps teams in large enterprises.
• Experience supporting UAT, stakeholder engagement, training, change management, and go-live activities.
• Excellent communication and stakeholder management to bridge technical and non-technical stakeholders.

Responsibilities

• Analyse and document secure coding requirements for application development projects.
• Collaborate with development teams to integrate security best practices into the software lifecycle.
• Conduct risk assessments and identify vulnerabilities in software applications.
• Provide recommendations and strategies to mitigate security risks.
• Facilitate workshops and training sessions on secure coding practices.
• Develop and maintain documentation related to application security standards.
• Work with stakeholders to ensure security requirements align with business objectives.
• Monitor and report on the effectiveness of implemented security measures.

Skills

Business Analyst experience

Stakeholder management

Requirements gathering

Tools

Snyk

Fortify

Checkmarx

Veracode

Job description

As a Business Analyst, leading the rollout of application security and secure code scanning tools. You'll work closely with Security, Development, and DevOps teams to gather requirements, improve processes, drive adoption, and ensure the successful implementation of secure coding practices across the organisation.

Client Details

Our client is a leading global technology consultancy delivering large-scale digital transformation and technology programs for enterprise organisations, based in Sydney.

Description

Key responsibilities:

• Analyse and document secure coding requirements for application development projects.
• Collaborate with development teams to ensure security best practices are integrated into the software lifecycle.
• Conduct risk assessments and identify vulnerabilities in software applications.
• Provide recommendations and strategies to mitigate security risks.
• Facilitate workshops and training sessions on secure coding practices.
• Develop and maintain documentation related to application security standards.
• Work closely with stakeholders to ensure security requirements align with business objectives.
• Monitor and report on the effectiveness of implemented security measures.

Profile

A successful Business Analyst - Secure Coding & Application Security should have:

• Proven experience as a Business Analyst delivering enterprise-scale Application Security, Secure Coding, or DevSecOps initiatives.
• Hands-on involvement in the rollout of SAST tools such as Snyk, Fortify, Checkmarx, Veracode, or similar platforms.
• Strong experience gathering and documenting business requirements, user stories, process maps, and functional specifications.
• A track record of working closely with Security, Development, Architecture, and DevOps teams within complex enterprise environments.
• Experience supporting UAT, stakeholder engagement, training, change management, and go-live activities to drive successful adoption.
• Excellent communication and stakeholder management skills, with the ability to bridge the gap between technical and non-technical teams.

Job Offer

• Competitive day-rate.
• working hybrid arrangements.
• Opportunity to work on temporary assignments in Sydney's thriving technology sector.