Business Analyst - Cyber Resilience

Effective People; Canberra; Híbrido; AUD 138.000 - 179.000; Jornada completa

Descripción de la vacante

Effective People is seeking an APS6 Business Analyst specialized in Cyber Security to join a federal government client. The role focuses on cyber resilience, security remediation and compliance initiatives within a large ICT environment, operating across multiple workstreams to unite business and technical stakeholders.

You will lead requirements elicitation, manage trade-offs, and ensure traceability, while applying PSPF/ISM/Essential Eight security frameworks.

Formación

• Delivered cyber resilience, security remediation or compliance initiatives in a large ICT environment.
• Led complex business analysis covering elicitation, requirements management, process modelling, traceability and delivery support.
• Applied cyber security frameworks and standards such as PSPF, ISM, Essential Eight or other relevant security and risk frameworks.
• Managed competing requirements and ensured they are clear, testable and traceable.
• Able to work effectively with senior executives, technical specialists, business representatives and external providers.
• Able to produce clear analysis artefacts supporting scope, risk, testing and implementation decisions.
• You're an Australian citizen
• You must hold a current NV1 clearance or above.

Responsabilidades

• Lead complex requirements elicitation and adapt your approach when information is incomplete or stakeholders disagree.
• Manage requirements from discovery through prioritisation, testability, scope and change.
• Build As-Is and To-Be process models, detailed user stories, data flow diagrams, use cases and test cases.
• Define the business analysis approach and deliverables for medium-complexity initiatives.
• Conduct current-state analysis and identify improvement opportunities.
• Work with senior executives, technical specialists, business teams and external providers.
• Identify cross-functional dependencies, sequencing risks and practical implementation phases.
• Analyse risks, change requests and design decisions and prepare recommendations.
• Coordinate quality assurance, verification, validation and defect prioritisation.
• Apply cyber security policies, standards and frameworks to analysis and delivery decisions.

Conocimientos

Cyber security

Business analysis

Requirements elicitation

Traceability

Stakeholder management

Agile

Risk analysis

Descripción del empleo

APS6 Business Analyst - Cyber Security

Location: Canberra, ACT; Brisbane, QLD; Melbourne, VIC; Sydney, NSW; Adelaide, SA
Contract: Up to 12 months, with extensions up to a maximum of 24 months
Pay: $100-$130 p/h including super (negotiable)
Work type: Full-time
Work arrangement: Hybrid, with specific arrangements agreed with your supervisor on a case-by-case basis
Clearance: Must hold a current NV1 clearance or above

About the Role

Join our Federal Government client as a senior Business Analyst working across cyber resilience, security remediation and compliance initiatives in a large ICT environment. You will lead complex analysis and requirements work across connected workstreams. You will bring business and technical stakeholders together, manage competing needs, maintain traceability and help teams make sound delivery decisions. The work sits within an Agile multidisciplinary environment and combines business analysis with cyber security, risk, quality and implementation activity.

What You'll Be Doing

• Lead complex requirements elicitation and adapt your approach when information is incomplete or stakeholders disagree
• Manage requirements from discovery through prioritisation, testability, scope and change
• Build As-Is and To-Be process models, detailed user stories, data flow diagrams, use cases and test cases
• Define the business analysis approach and deliverables for medium-complexity initiatives
• Conduct current-state analysis and identify improvement opportunities
• Work with senior executives, technical specialists, business teams and external providers
• Identify cross-functional dependencies, sequencing risks and practical implementation phases
• Analyse risks, change requests and design decisions and prepare recommendations
• Coordinate quality assurance, verification, validation and defect prioritisation
• Apply cyber security policies, standards and frameworks to analysis and delivery decisions

What You Bring (Essential Criteria)

• You've delivered cyber resilience, security remediation or compliance initiatives in a large and complex ICT environment
• You've led complex business analysis covering elicitation, requirements management, process modelling, traceability and delivery support
• You've applied cyber security frameworks and standards such as PSPF, ISM, Essential Eight or other relevant security and risk frameworks
• You can manage competing requirements and make sure they are clear, testable and traceable
• You can work effectively with senior executives, technical specialists, business representatives and external providers
• You can produce clear analysis artefacts that support scope, risk, testing and implementation decisions
• You're an Australian citizen
• You must hold a current NV1 clearance or above

Nice to Have (Desirable Criteria)

• Government cyber security, infrastructure, ICT transformation or uplift experience
• Large enterprise experience across cloud, identity and access management, security operations, infrastructure, applications or data services
• Experience managing tight delivery timeframes, dependencies and competing priorities
• Ability to explain complex cyber security concepts to technical and non-technical audiences
• Experience with NIST or related security and risk frameworks