Contract Business Analyst - Cyber Security (Govt)

CUE-X; Canberra; Hybrid; AUD 110,000 - 150,000; Full time

Benefits offered by this job

null

Job summary

Cue-X is seeking a Business Analyst specialized in cyber security to support a large client’s security and compliance program in an Agile setup. The role involves turning security findings into clear requirements and backlogs, working with executives, engineers and vendors, and translating risk into remediation actions.

Candidates should have 5+ years as a BA, hands-on cyber remediation or compliance experience, and strong knowledge of PSPF, ISM, Essential Eight and NIST CSF, with excellent

Qualifications

• 5+ years’ experience as a Business Analyst.
• Experience in cyber remediation or security compliance programs.
• Practical working knowledge of PSPF, ISM, Essential Eight and NIST CSF.
• Excellent stakeholder management and communication skills, including with executives.

Responsibilities

• Map security controls against PSPF, ISM, Essential Eight and NIST CSF requirements, and run gap assessments
• Translate assessment findings and vulnerability data into remediation requirements, user stories and backlog items
• Produce As-Is and To-Be process models (BPMN), use cases, integration data flows and test cases
• Maintain requirements traceability and complete impact analysis on change requests
• Track risks and controls using GRC tooling such as Archer IRM
• Take part in two-week sprints and work closely with engineering, security and vendor teams
• Explain cyber risk in plain language to SES and EL2 stakeholders
• Identify and drive process improvements across the security program

Skills

Business Analysis

Agile delivery

Stakeholder management

Security frameworks

GRC tooling

Tools

Archer IRM

Job description

Cue-X is seeking a Business Analyst specialized in cyber security to support a large client’s security and compliance program in an Agile setup. The role involves turning security findings into clear requirements and backlogs, working with executives, engineers and vendors, and translating risk into remediation actions.

Candidates should have 5+ years as a BA, hands-on cyber remediation or compliance experience, and strong knowledge of PSPF, ISM, Essential Eight and NIST CSF, with excellent