Cyber Business Analyst

Hydrogen Group; Sydney; Hybrid; AUD 110,000 - 150,000; Full time

Job summary

Hydrogen Group is seeking a Cyber Business Analyst to join a major cyber security program in Sydney. The role is hybrid with 1 day on-site per week and focuses on delivering security initiatives across a large enterprise.

You will translate complex security requirements into clear business and technical specs, working with security architects, engineers and vendors to ensure successful design, implementation and delivery of security controls and programs.

Qualifications

• Significant Business Analysis experience delivering cyber security, information security, or technology risk initiatives within large and complex enterprise environments
• Experience supporting cyber security projects end-to-end, from discovery through to design, implementation and delivery
• Experience analysing and documenting requirements for perimeter network security, network segmentation and security control initiatives
• Experience supporting Web Application Firewall (WAF) discovery, design, implementation or optimisation activities
• Strong understanding of: Network security architecture and segmentation, Perimeter security controls and boundary protection, Firewalls and related security technologies, Zero Trust security principles, Cloud security concepts and controls
• Ability to work effectively with security architects, engineers, technology teams, vendors and business stakeholders to deliver security outcomes
• Proven ability to translate complex technical security requirements into clear business, functional and non-functional requirements

Responsibilities

• Translate complex security requirements into clear business, functional and non-functional requirements
• Support Cyber Security and technology risk initiatives from discovery through to design, implementation and delivery
• Collaborate with Security Architects, Engineers, vendors and business stakeholders on high-impact security programs

Job description

12-Month Contract (with potential to extend)

Hybrid - Sydney CBD (1 day/week onsite)

Our client is investing heavily in a major, multi-year Cyber Security program spanning network security, identity management, and broader technology risk initiatives. As part of this continued investment, they're looking for an experienced Cyber Business Analyst to join the team and support the delivery of critical security initiatives across a large, complex enterprise environment.

This is a fantastic opportunity for a Business Analyst with genuine, hands-on Cyber Security delivery experience to work closely with Security Architects, Engineers, vendors and business stakeholders on high-impact, high-visibility security programs.

About the Role

You’ll support Cyber Security and technology risk initiatives from discovery through to design, implementation and delivery - translating complex technical security requirements into clear, actionable business, functional and non-functional requirements.

What You’ll Bring

Required:

• Significant Business Analysis experience delivering cyber security, information security, or technology risk initiatives within large and complex enterprise environments
• Demonstrated experience supporting cyber security projects end-to-end, from discovery through to design, implementation and delivery
• Experience analysing and documenting requirements for perimeter network security, network segmentation and security control initiatives
• Experience supporting Web Application Firewall (WAF) discovery, design, implementation or optimisation activities
• Strong understanding of:
  • Network security architecture and segmentation
  • Perimeter security controls and boundary protection
  • Firewalls and related security technologies
  • Zero Trust security principles
  • Cloud security concepts and controls
• Ability to work effectively with security architects, engineers, technology teams, vendors and business stakeholders to deliver security outcomes
• Proven ability to translate complex technical security requirements into clear business, functional and non-functional requirements

Highly Desirable:

• Experience with identity and access management solutions, including Okta and SailPoint
• Exposure to Identity and Access Management (IAM), Privileged Access Management (PAM), and access governance initiatives
• Experience working within Service Integration and Management (SIAM) operating models and multi-vendor environments
• Experience with enterprise security management, monitoring, or governance tooling
• Experience working with cyber security vendors, managed service providers, and third-party delivery partners
• Knowledge of security governance, risk, and compliance practices within regulated environments

Why Apply?

This role sits within a substantial, multi-year Cyber program with genuine breadth and longevity - offering the opportunity to work across a range of security domains and make a real impact on the organisation’s security posture.

If you have deep, practical Cyber Security BA experience and are looking for your next challenge, we'd love to hear from you.