Business Analyst

Michael Page; Sydney; On-site; AUD 120,000 - 190,000; Full time

Job summary

Michael Page is seeking a Business Analyst specializing in Secure Coding and Application Security to lead enterprise-scale initiatives. You will collaborate with Security, Development, Architecture and DevOps teams, drive requirements, and support go-live activities across large digital programs.

You will facilitate training, document security standards, and ensure secure coding practices are integrated throughout the software lifecycle in a Sydney-based enterprise environment.

Qualifications

• Proven experience delivering enterprise-scale Application Security, Secure Coding, or DevSecOps initiatives.
• Hands-on involvement in rollout of SAST tools such as Snyk, Fortify, Checkmarx, Veracode, or similar.
• Strong experience gathering and documenting business requirements, user stories, process maps, and functional specifications.
• Track record of working with Security, Development, Architecture, and DevOps teams in complex enterprise environments.
• Experience supporting UAT, stakeholder engagement, training, change management, and go-live activities.

Responsibilities

• Analyse and document secure coding requirements for application development projects.
• Collaborate with development teams to ensure security best practices are integrated into the software lifecycle.
• Conduct risk assessments and identify vulnerabilities in software applications.
• Provide recommendations and strategies to mitigate security risks.
• Facilitate workshops and training sessions on secure coding practices.
• Develop and maintain documentation related to application security standards.
• Work closely with stakeholders to ensure security requirements align with business objectives.
• Monitor and report on the effectiveness of implemented security measures.

Skills

Business analysis

Stakeholder management

Documentation

Requirements gathering

Tools

Snyk

Fortify

Checkmarx

Veracode

Job description

About Our Client

Our client is a leading global technology consultancy delivering large-scale digital transformation and technology programs for enterprise organisations, based in Sydney.

Job Description

Key responsibilities:

• Analyse and document secure coding requirements for application development projects.
• Collaborate with development teams to ensure security best practices are integrated into the software lifecycle.
• Conduct risk assessments and identify vulnerabilities in software applications.
• Provide recommendations and strategies to mitigate security risks.
• Facilitate workshops and training sessions on secure coding practices.
• Develop and maintain documentation related to application security standards.
• Work closely with stakeholders to ensure security requirements align with business objectives.
• Monitor and report on the effectiveness of implemented security measures.

The Successful Applicant

A successful Business Analyst - Secure Coding & Application Security should have:

• Proven experience as a Business Analyst delivering enterprise-scale Application Security, Secure Coding, or DevSecOps initiatives.
• Hands-on involvement in the rollout of SAST tools such as Snyk, Fortify, Checkmarx, Veracode, or similar platforms.
• Strong experience gathering and documenting business requirements, user stories, process maps, and functional specifications.
• A track record of working closely with Security, Development, Architecture, and DevOps teams within complex enterprise environments.
• Experience supporting UAT, stakeholder engagement, training, change management, and go-live activities to drive successful adoption.
• Excellent communication and stakeholder management skills, with the ability to bridge the gap between technical and non-technical teams.