Business Analyst - Application Security

Whizdom; Sydney; On-site; AUD 90,000 - 120,000; Full time

Job summary

Whizdom in Sydney is seeking a Business Analyst to support a secure coding and application security transformation. You will translate complex security requirements into clear processes, user stories and implementation plans across Security, Development, Architecture and DevOps teams.

The role focuses on gathering requirements for secure code scanning platforms (Snyk, Fortify), defining standards and governance, shaping SDLC/CI/CD integration, and driving adoption through UAT, change management

Qualifications

• Proven BA experience in Secure Coding, App Security or DevSecOps transformations.
• Experience gathering and documenting functional and non-functional requirements.
• Knowledge of SAST tools such as Snyk/Fortify or similar platforms.
• Understanding of secure SDLC, CI/CD pipelines and governance.
• Experience developing user stories, process maps and implementation docs.

Responsibilities

• Gather, analyse and document functional and non-functional requirements for secure code scanning solutions.
• Support the implementation of SAST platforms such as Snyk or Fortify.
• Define secure coding standards, remediation requirements and governance processes.
• Identify process changes to integrate secure coding controls into SDLC and CI/CD pipelines.
• Document future-state workflows, operating procedures and onboarding requirements.
• Develop business requirements, user stories, process maps and implementation documentation.
• Support UAT, stakeholder engagement, training and change management activities.
• Prepare rollout and go-live plans covering governance controls and post-implementation support.

Skills

Secure Coding

Business Analysis

SDLC & CI/CD

Stakeholder Engagement

UAT & Change Mgmt

Tools

Snyk

Fortify

Job description

Business Analyst – Secure Coding & Application Security

• Sydney, NSW
• 6-Month Contract with Potential Extension

We are partnering with a leading enterprise organisation to engage an experienced Business Analyst to support a secure coding and application security transformation. This role will suit someone who can translate complex security requirements into clear processes, user stories and implementation plans.

About the Role

You will work closely with Security, Development, Architecture and DevOps teams to support the implementation of secure code scanning capabilities. The role will focus on requirements gathering, process design, governance, stakeholder engagement and the successful adoption of new security controls across the software development lifecycle.

Key Responsibilities

• Gather, analyse and document functional and non-functional requirements for secure code scanning solutions.
• Support the implementation of platforms such as Snyk, Fortify or comparable SAST tools.
• Define secure coding standards, remediation requirements, risk classification models and governance processes.
• Identify process changes required to integrate secure coding controls into SDLC and CI/CD pipelines.
• Document future-state workflows, operating procedures, exception management processes and developer onboarding requirements.
• Develop business requirements, user stories, process maps, reporting requirements and implementation documentation.
• Support UAT, stakeholder engagement, training and change management activities.
• Prepare rollout and go-live plans covering operational readiness, governance controls, metrics and post-implementation support.

Skills & Experience

To be successful in this role, you will have:

• Proven Business Analyst experience supporting Secure Coding, Application Security or DevSecOps transformation initiatives.
• Experience gathering and documenting functional and non-functional requirements.
• Knowledge of secure code scanning solutions such as Snyk, Fortify or similar SAST platforms.
• Understanding of secure software development practices, SDLC processes and CI/CD pipelines.
• Experience developing user stories, process maps, operating procedures and implementation documentation.
• Strong stakeholder engagement skills with the ability to work across Security, Development, Architecture and DevOps teams.
• Experience supporting UAT, training, change management and technology adoption.
• Strong analytical, documentation and communication skills.

What’s on Offer?

• Initial six-month contract with potential extension.
• Sydney-based engagement.
• Opportunity to contribute to a significant application security transformation.
• Work with multidisciplinary Security, Development, Architecture and DevOps teams.
• Play a key role in improving secure coding practices and governance across enterprise development environments.

Candidates will need to be willing to undergo pre-employment screening checks, which may include identity and work rights checks, security clearance verification and any other client-requested checks.