DevSecOps Business Analyst - Sydney

Ayan Infotech; Sydney; On-site; AUD 120,000 - 180,000; Full time

Job summary

AYAN InfoTech is looking for a DevSecOps Business Analyst to join a Sydney-based project. The role involves gathering and documenting security, compliance, and DevSecOps requirements, and working with cross-functional teams to implement CI/CD security controls.

The ideal candidate has 7+ years of experience, can translate complex security needs into user stories, and will help drive governance, onboarding, and maturity across the SDLC.

Qualifications

• Defining DevSecOps requirements including security, compliance, and governance.
• Translating business and security needs into user stories and acceptance criteria.
• Collaborating with development, security, QA, and ops teams to implement controls.

Responsibilities

• Gather, analyze, and document business, security, and compliance requirements for DevSecOps initiatives.
• Collaborate with development, security, QA, and operations teams to define requirements for CI/CD security controls, SAST, SCA, and remediation processes.
• Translate requirements into user stories, flows, specs, and acceptance criteria.
• Facilitate workshops to identify security risks and automation opportunities across the SDLC.
• Support onboarding of apps into DevSecOps toolchains including secure code scanning and secrets management.
• Track and report findings, remediation status, risk exceptions, and compliance metrics with governance alignment.
• Prepare SOPs, process docs, dashboards, and executive reports to drive DevSecOps maturity.

Skills

DevSecOps

Business Analysis

CI/CD Security

SAST

SCA

Vulnerability Remediation

Security Governance

Workshop Facilitation

Documentation

SDLC

Job description

AYAN InfoTech is looking for DevSecOps Business Analyst to join an exciting project based in Sydney. The role offers you the opportunity to contribute towards an extremely well structured and mature environment, working on sophisticated enhancement projects.

Role: DevSecOps Business Analyst

Location: Sydney

Contract Duration: 6 Months with high possible extensions

Experience: 7+ Years

Key Responsibilities:

• Gather, analyze, and document business, security, and compliance requirements for DevSecOps initiatives and secure software development practices.
• Collaborate with development, security, QA, and operations teams to define requirements for CI/CD security controls, Secure Code Scanning (SAST), Software Composition Analysis (SCA), and vulnerability remediation processes.
• Translate business and security requirements into user stories, process flows, functional specifications, and acceptance criteria.
• Facilitate workshops with stakeholders to identify security risks, control gaps, and opportunities for automation across the Software Development Lifecycle (SDLC).
• Support onboarding of applications into DevSecOps toolchains, including secure code scanning, secrets management, container security, and compliance monitoring solutions.
• Track and report security findings, remediation status, risk exceptions, and compliance metrics while ensuring alignment with governance requirements.
• Prepare SOPs, process documentation, dashboards, and executive reports to drive continuous improvement and DevSecOps maturity across the organization.

Contact: 61-[phone] for more details.

Please note we will be able to contact only shortlisted candidates for this role. We thank you in advance for your interest.