Cyber Security Business Analyst

Really Awesome People; Canberra; Hybrid; AUD 90,000 - 115,000; Full time

Job summary

Really Awesome People Pty Ltd is recruiting a Cyber Security Business Analyst to support cyber resilience, security remediation and compliance in a large federal ICT environment.

You’ll lead workshops and interviews, translate business and security needs into testable requirements, and maintain traceability through delivery and testing. You’ll also assess current cyber operations, map workflows, identify opportunities for improvement and automation, and brief stakeholders on options and risks.

Qualifications

• Leads workshops and interviews to capture security needs.
• Translates business and security needs into testable requirements.
• Maintains traceability through delivery and testing.
• Assesses current cyber operations and maps workflows.
• Identifies opportunities for improvement and automation, briefs options and risks.

Responsibilities

• Lead workshops and interviews to translate business and security needs into testable requirements.
• Maintain traceability through delivery and testing.
• Assess current cyber operations and map workflows to identify improvements and automation.
• Brief stakeholders on options, risks and remediation approaches.

Skills

Workshop facilitation

Requirement tracing

Process mapping

Security governance

Stakeholder communication

Tools

Rapid7

Tenable

Defender

Forescout

Sentinel

Job description

Cyber Security Business Analyst | APS6 equivalent | Federal government contract

Location: Canberra, Brisbane, Melbourne, Sydney or Adelaide

Term: Estimated start 1 February 2027. Up to 12 months initially, with extension options of up to 24 months, subject to approval.

Clearance: You must hold and maintain a current NV1.

Really Awesome People is recruiting a Cyber Security Business Analyst to support cyber resilience, security remediation and compliance in a large federal government ICT environment.

You’ll lead workshops and interviews, translate business and security needs into testable requirements, and maintain traceability through delivery and testing. You’ll also assess current cyber operations, map workflows, identify opportunities for improvement and automation, and brief stakeholders on options and risks.

You’ll bring experience in complex ICT transformation, cyber remediation or compliance, along with practical knowledge of PSPF, ISM and Essential Eight. You’ll be comfortable working with executives, technical specialists and business teams, and familiar with security tooling such as Rapid7, Tenable, Defender, Forescout or Sentinel. Experience with cyber uplift, cloud, identity and access management or security operations is desirable.

You’ll work onsite for the first six weeks. The agency may then consider hybrid arrangements, with at least three days per week in the designated office. You’ll need to live within reasonable commuting distance.