Cybersecurity BA: SAST/SCA Rollout and Governance Lead

Acira Consultancy Pty Ltd; Geehi; On-site; AUD 120,000 - 170,000; Full time

Job summary

Acira Consultancy Pty ltd is seeking a senior BA to bridge cybersecurity, engineering, and governance for introducing SAST and SCA across GitLab SaaS and On-Prem. You will translate business needs into structured requirements, rollout plans, and governance with clear success criteria.

You will map current-state SDLC, define functional and non-functional requirements, and create rollout sequencing from pilots to enterprise-wide deployment across SaaS and Self-Managed GitLab estates.

Qualifications

• 6–10 years total BA experience, with 2–3 years in cybersecurity/DevSecOps.
• Experience in telco or regulated environments preferred.
• Understanding of SAST/SCA/DAST and secrets detection.
• Familiarity with GitLab CI/CD concepts and pipeline code.
• Knowledge of GitLab licensing tiers and feature availability.
• Familiarity with vulnerability management frameworks (CVSS, CWE, OWASP).
• Experience writing requirements/user stories for tooling rollouts.
• Strong stakeholder facilitation across security, engineering and platform teams.

Responsibilities

• Map current-state SDLC and GitLab topology across teams and tools.
• Document SAST/SCA requirements: language coverage, FP tolerance, latency.
• Produce build-vs-buy matrix for GitLab vs third-party tools.
• Define vulnerability management workflow and ITSM mapping.
• Write user stories and acceptance criteria for pipeline integration.
• Own RAID log, RACI, and rollout sequencing from pilots to full rollout.
• Support change management with comms, training, and adoption metrics.
• Liaise with SME and AI Expert to reflect real tool capabilities.

Skills

BA experience

Cybersecurity

DevSecOps

Platform engineering

Telco/regulated domain

GitLab CI/CD

SAST/SCA knowledge

Vulnerability frameworks

Stakeholder facilitation

Requirements writing

Tools

GitLab

Job description

Acira Consultancy Pty ltd is seeking a senior BA to bridge cybersecurity, engineering, and governance for introducing SAST and SCA across GitLab SaaS and On-Prem. You will translate business needs into structured requirements, rollout plans, and governance with clear success criteria.

You will map current-state SDLC, define functional and non-functional requirements, and create rollout sequencing from pilots to enterprise-wide deployment across SaaS and Self-Managed GitLab estates.