Business Analyst- Cyber Security

CUE-X; Canberra; Hybrid; AUD 110,000 - 150,000; Full time

Benefits offered by this job

null

Job summary

Cue-X is seeking a Business Analyst specialized in cyber security to support a large client’s security and compliance program in an Agile setup. The role involves turning security findings into clear requirements and backlogs, working with executives, engineers and vendors, and translating risk into remediation actions.

Candidates should have 5+ years as a BA, hands-on cyber remediation or compliance experience, and strong knowledge of PSPF, ISM, Essential Eight and NIST CSF, with excellent

Qualifications

• 5+ years’ experience as a Business Analyst.
• Experience in cyber remediation or security compliance programs.
• Practical working knowledge of PSPF, ISM, Essential Eight and NIST CSF.
• Excellent stakeholder management and communication skills, including with executives.

Responsibilities

• Map security controls against PSPF, ISM, Essential Eight and NIST CSF requirements, and run gap assessments
• Translate assessment findings and vulnerability data into remediation requirements, user stories and backlog items
• Produce As-Is and To-Be process models (BPMN), use cases, integration data flows and test cases
• Maintain requirements traceability and complete impact analysis on change requests
• Track risks and controls using GRC tooling such as Archer IRM
• Take part in two-week sprints and work closely with engineering, security and vendor teams
• Explain cyber risk in plain language to SES and EL2 stakeholders
• Identify and drive process improvements across the security program

Skills

Business Analysis

Agile delivery

Stakeholder management

Security frameworks

GRC tooling

Tools

Archer IRM

Job description

Cue-X is seeking a Business Analyst - Cyber Security. This is a contract opportunity and due to the nature of our clients work , You must be an Australian Citizen to be considered with an active Mid level AGSVA security clearance highly regarded

Location: Multiple capital cities

Working arrangement: Onsite full-time for the first 6 weeks, then hybrid (minimum 3 days per week in the office)

Start date: Early 2027

Duration: Up to 12 months

About The Role

A large client is seeking a Business Analyst to support its cyber security and security compliance program. You will work in a multidisciplinary Agile team, turning security findings and compliance obligations into clear requirements and remediation backlogs. The role suits an experienced BA who understands government security frameworks and can work confidently with executives, engineers and vendors.

Key Responsibilities

• Map security controls against PSPF, ISM, Essential Eight and NIST CSF requirements, and run gap assessments
• Translate assessment findings and vulnerability data into remediation requirements, user stories and backlog items
• Produce As-Is and To-Be process models (BPMN), use cases, integration data flows and test cases
• Maintain requirements traceability and complete impact analysis on change requests
• Track risks and controls using GRC tooling such as Archer IRM
• Take part in two-week sprints and work closely with engineering, security and vendor teams
• Explain cyber risk in plain language to SES and EL2 stakeholders
• Identify and drive process improvements across the security program

Consultant Requirements

• 5+ years’ experience as a Business Analyst
• At least 2-3 years on cyber remediation, security uplift or compliance programs in federal government or another regulated sector, such as banking, health or utilities
• Practical working knowledge of PSPF, ISM, Essential Eight and NIST CSF
• Strong core BA skills: process modelling, requirements management, user stories, test cases and traceability
• Experience working in Agile delivery teams
• Excellent stakeholder management and communication skills, including with senior executives
• Australian citizenship and a current Mid Level AGSVA security clearance

About Cue-X

Cue-X is a boutique Canberra based consultancy specialising in ICT transformation and workforce capability across Defence, Federal Government and large organisations. cue-X understands the complex technology, security and workforce challenges associated with mission critical programs. We partner with organisations to complement existing teams, uplift capability and provide highly skilled, locally based security cleared professionals who can successfully design, implement and support secure, efficient and modern technology environments.