Cyber Security Business Analyst

Logicalis; Melton; Hybrid; AUD 179,000 - 223,000; Full time

Benefits offered by this job

Hybrid work model

Onsite 2 days/week

Job summary

Logicalis in Victoria seeks an experienced Cyber Security Business Analyst for an 8-month contract, hybrid work with 2 onsite days per week. You will join a large security transformation program, support essential eight remediation, and help design a future-state Cyber Security Operating Model.

Strong collaboration with technical and non-technical stakeholders is required. Responsibilities include eliciting and documenting cyber security requirements, facilitating workshops, mapping processes,

Qualifications

• Proven experience as a Business Analyst within Cyber Security or Information Security programs.
• Strong understanding of cyber security principles, frameworks, and operating models.
• Experience supporting security uplift, risk management, governance, or compliance initiatives.
• Demonstrated involvement in security maturity and remediation programs.
• Experience gathering and documenting complex business and technical requirements.
• Strong stakeholder management and workshop facilitation skills.
• Ability to communicate effectively with both technical and non-technical audiences.

Responsibilities

• Elicit, analyse, and document cyber security and information security business requirements.
• Support the delivery of the Trusted & Secure Program and associated security uplift initiatives.
• Contribute to the design and development of a future Cyber Security Operating Model.
• Facilitate workshops and stakeholder engagement sessions across technical and business teams.
• Analyse current-state processes, controls, policies, and security operating procedures.
• Develop business requirements, process maps, user stories, functional specifications, and gap analyses.
• Support the delivery and tracking of Essential Eight remediation activities.
• Work closely with cyber security specialists, architects, project managers, risk teams, and executive stakeholders.
• Assist with governance, compliance, risk management, and reporting activities.
• Ensure business outcomes align with organisational security objectives, regulatory obligations, and best practices.

Skills

Cyber security BA

Security frameworks

Stakeholder management

Requirements gathering

Workshop facilitation

Communication skills

Job description

Cyber Security Business Analyst (8-Month Contract)| Hybrid (2 Days Onsite) | Potential Extension

Are you an experienced Cyber Security Business Analyst looking to make a meaningful impact within a large-scale security transformation program?

We are seeking a highly capable Cyber Security BA to join a critical cyber and information security initiative within a progressive local government environment. This role will support the delivery of major security uplift activities, including the development of a future-state Cyber Security Operating Model and ongoing Essential Eight maturity initiatives.

This is an initial 8-month contract through to the end of the financial year, with strong potential for extension based on project outcomes and future program requirements.

Key Responsibilities

Elicit, analyse, and document cyber security and information security business requirements.

Support the delivery of the Trusted & Secure Program and associated security uplift initiatives.

Contribute to the design and development of a future Cyber Security Operating Model.

Facilitate workshops and stakeholder engagement sessions across technical and business teams.

Analyse current-state processes, controls, policies, and security operating procedures.

Develop business requirements, process maps, user stories, functional specifications, and gap analyses.

Support the delivery and tracking of Essential Eight remediation activities.

Work closely with cyber security specialists, architects, project managers, risk teams, and executive stakeholders.

Assist with governance, compliance, risk management, and reporting activities.

Ensure business outcomes align with organisational security objectives, regulatory obligations, and best practices.

Required Experience & Skills

Proven experience as a Business Analyst within Cyber Security or Information Security programs.

Strong understanding of cyber security principles, frameworks, and operating models.

Experience supporting security uplift, risk management, governance, or compliance initiatives.

Demonstrated involvement in security maturity and remediation programs.

Experience gathering and documenting complex business and technical requirements.

Strong stakeholder management and workshop facilitation skills.

Ability to communicate effectively with both technical and non-technical audiences.

Highly Desirable

Experience delivering initiatives aligned to the Essential Eight framework.

Exposure to security operating model design and implementation.

Understanding of cyber governance, risk, and compliance frameworks.

Experience working within government, local government, regulated, or public sector environments.

Knowledge of security standards such as:

ISO 27001

NIST Cyber Security Framework

Victorian Protective Data Security Standards (VPDSS)

Location

Minimum of 2 days per week onsite in Melton, Victoria

Remaining days can be worked remotely

If you are a Cyber Security Business Analyst with hands-on experience supporting security transformation, Essential Eight initiatives, or cyber operating model development, we'd love to hear from you.