Business Analyst Cyber Security

Paxus; City of Melbourne; On-site; AUD 110,000 - 140,000; Full time

Job summary

Paxus is seeking a Business Analyst (Cyber Security) to drive technology projects and BAU improvements across the SDLC. You will shape capabilities in the Information and Cyber Security domain, manage requirements and stakeholder engagements, and support change management and training for seamless BAU handover.

The role requires 6–10 years in business analysis within tech environments, with experience across Agile and Waterfall, and familiarity with cyber security contexts and vendor

Qualifications

• 6–10 years of business analysis experience in technology projects or operations.
• Experience across the full SDLC using Agile and Waterfall methodologies.
• Prior cyber security BAU or transformation exposure preferred.
• Experience collaborating with external vendors/third-party suppliers.
• Solid understanding of project financial management, including OPEX/CAPEX.
• Strong analytical, logical reasoning and stakeholder communication skills.
• Proficiency with MS Word, PowerPoint, Excel and Project.

Responsibilities

• Lead end-to-end SDLC engagement across business cases, requirements and benefits realization.
• Drive requirements elicitation, documentation, and traceability.
• Design and model current and future business processes using BPMN.
• Support expansion of cyber security capabilities and tool rollouts.
• Create test scenarios, coordinate UAT, and ensure delivery of business outcomes.
• Assist change management and develop training materials for BAU handover.
• Collaborate with stakeholders and vendors to deliver milestones.
• Participate in internal BA governance and promote best practices.

Skills

Requirements elicitation

Process design

BPMN

SDLC

Agile

Waterfall

Cyber security

Vendor management

Financial literacy

Problem solving

Communication

MS Office

MS Word

MS PowerPoint

MS Excel

MS Project

Tools

MS Word

MS PowerPoint

MS Excel

MS Project

Job description

As a Business Analyst (Cyber Security), you will play an essential role in driving both high-impact technology projects and business-as-usual (BAU) operational improvements. Working right across the end-to-end Systems Development Life Cycle (SDLC)-from early business case development through to post-implementation and benefits realization-you will shape and deliver vital capability extensions and new initiatives within our Information and Cyber Security domain.

Key Responsibilities

• End-to-End SDLC Engagement: Contribute to projects across all phases (pre-Gate 1 to post-implementation), including business case preparation, requirements management, and benefits realization.

• Requirements Elicitation & Management: Lead requirements elicitation workshops, document functional/non-functional requirements, and maintain full requirements traceability.

• Process Design & Modeling: Map current-state and future-state business processes using Business Process Modeling and Notation (BPMN).

• Cyber Security Domain Support: Contribute to the expansion of existing cyber security capabilities and the rollout of new security tools and operational frameworks.

• Testing & Quality Assurance: Formulate test scenarios, plan and facilitate User Acceptance Testing (UAT), and validate that solutions meet business requirements.

• Change Management & Transition: Support change management activities, assist in developing and delivering training materials, and ensure seamless handover to BAU operations.

• Stakeholder & Vendor Collaboration: Engage effectively with internal stakeholders and third-party vendors/suppliers to drive deliverable outcomes.

• Community & Practice Governance: Participate in the internal BA community to promote alignment, best practices, and continuous practice improvement.

Key Requirements & Qualifications

• Experience: 6-10 years of experience in business analysis and process design within technology project, application development, or technology operations environments.

• SDLC & Methodology Mastery: Proven track record working across all phases of the SDLC using both Agile and Waterfall delivery methodologies.

• Cyber Security Context: Prior experience working within Information & Cyber Security BAU or transformation teams is preferred (though not essential).

• Vendor Management: Demonstrated experience collaborating with external vendors and third-party suppliers to achieve project milestones.

• Financial Literacy: Solid understanding of project and business financial management principles, including OPEX, CAPEX, forecasting, estimation, and cost-benefit analysis.

• Problem-Solving & Communication: Exceptional analytical, logical, and reasoning skills, paired with active listening capabilities to understand stakeholder objectives and formulate clear solutions.

• Technical Proficiency: High proficiency in standard business toolsets, including MS Word, MS PowerPoint, MS Excel, and MS Project.

Paxus values diversity and welcomes applications from Indigenous Australians, people from diverse cultural and linguistic backgrounds and people living with a disability. If you require an adjustment to the recruitment process, including the application form in an alternate format, please contact me on the above contact details.