Business Analyst

ITbility; Sydney; On-site; AUD 90,000 - 120,000; Full time

Job summary

ITbility in Sydney is seeking a DevSecOps Business Analyst to gather, analyze and document security and compliance requirements for secure software delivery. The role collaborates with development, security, QA and operations to define CI/CD security controls, SAST, SCA, and remediation processes.

The position will facilitate workshops to identify security gaps, drive automation across the SDLC, and support onboarding of applications into DevSecOps toolchains with secure code scanning and

Qualifications

• Gather, analyze, and document business, security, and compliance requirements for DevSecOps initiatives.
• Translate requirements into user stories, processes, functional specs, and acceptance criteria for secure software delivery.
• Facilitate workshops with stakeholders to identify security risks, control gaps, and opportunities for automation across the SDLC.
• Assist onboarding of applications into DevSecOps toolchains, including secure code scanning, secrets management, and compliance monitoring.

Responsibilities

• Gather, analyze, and document business, security, and compliance requirements for DevSecOps initiatives and secure software development practices.
• Collaborate with development, security, QA, and operations teams to define requirements for CI/CD security controls, Secure Code Scanning (SAST), Software Composition Analysis (SCA), and vulnerability remediation processes.
• Translate business and security requirements into user stories, process flows, functional specifications, and acceptance criteria.
• Facilitate workshops with stakeholders to identify security risks, control gaps, and opportunities for automation across the Software Development Lifecycle (SDLC).
• Support onboarding of applications into DevSecOps toolchains, including secure code scanning, secrets management, container security, and compliance monitoring solutions.
• Track and report security findings, remediation status, risk exceptions, and compliance metrics while ensuring alignment with governance requirements.
• Prepare SOPs, process documentation, dashboards, and executive reports to drive continuous improvement and DevSecOps maturity across the organization.

Skills

DevSecOps

Business analysis

Requirements gathering

Security controls

CI/CD security

SAST

SCA

SDLC

Workshop facilitation

Job description

We are looking for a DevSecOps Business Analyst in Sydney; this will be a 6 months contract role.

Required Skills & Experience

• Gather, analyze, and document business, security, and compliance requirements for DevSecOps initiatives and secure software development practices.
• Collaborate with development, security, QA, and operations teams to define requirements for CI/CD security controls, Secure Code Scanning (SAST), Software Composition Analysis (SCA), and vulnerability remediation processes.
• Translate business and security requirements into user stories, process flows, functional specifications, and acceptance criteria.
• Facilitate workshops with stakeholders to identify security risks, control gaps, and opportunities for automation across the Software Development Lifecycle (SDLC).
• Support onboarding of applications into DevSecOps toolchains, including secure code scanning, secrets management, container security, and compliance monitoring solutions.
• Track and report security findings, remediation status, risk exceptions, and compliance metrics while ensuring alignment with governance requirements.
• Prepare SOPs, process documentation, dashboards, and executive reports to drive continuous improvement and DevSecOps maturity across the organization.

All candidates should have full working rights in Australia. Only shortlisted candidates will be contacted for this role.