Minimum of 3 Senior Systems Analyst

Hyperion IT Pty Ltd.; Canberra; Hybrid; AUD 130,000 - 210,000; Full time

Job summary

Hyperion IT Pty Ltd. seeks a Senior Systems Analyst to translate business requirements into technical solutions supporting cyber uplift and compliance across large ICT environments.

You will work with stakeholders, architects, engineers and delivery teams to implement security remediation, risk reduction and accreditation activities. The role covers vulnerability management, identity and access management, security operations, cloud security and regulatory obligations within complex systems.

Qualifications

• Cyber security knowledge and experience.
• Protective Security Policy Framework (PSPF).
• Information Security Manual (ISM).
• National Institute of Standards and Technology (NIST).
• Demonstrated experience translating cyber security, compliance and operational requirements into technical solutions.

Responsibilities

• Analyse and document business, functional and technical requirements for cyber uplift.
• Develop system specifications and designs to support security remediation.
• Support accreditation, assurance and compliance activities.
• Collaborate with stakeholders to define tasks and ensure timely implementation.
• Manage life cycle of changes and team performance.

Skills

Cyber security

PSPF

ISM

NIST

Vulnerability management

Identity and access management

Security operations

Cloud security

Security risk assessments

Tools

Microsoft Sentinel

AWS

Job description

NSW, VIC, QLD, SA, ACT NV1 Hybrid Closes 17 November 2026 at 11:59pm Questions close 13 November 2026

Estimated start date 1 February 2027

Experience level Senior - EL1 equivalent

Initial contract duration Up to 12 months

Maximum hours 80 hours per week

Extension term 24 months

The Labour Hire Worker is expected to work onsite for the first 6 weeks before a hybrid flexible working arrangement may be considered. Any hybrid flexible working arrangement will require the Labour Hire Worker to work a minimum of 3 days per week in the designated office location and will also be on the provision that the Labour Hire Worker’s residing address is within reasonable travel time and distance of the RFQ location. The location is the capital city of selected state/s.

About the Role

Systems Analysts translate business requirements into technical requirements that align with relevant architectures.

Senior Systems Analysts are responsible for analysing, designing and documenting ICT solutions that support the Agency's Cyber Uplift Program and broader cyber security objectives. They work closely with business stakeholders, architects, engineers, security specialists and delivery teams to translate cyber security, compliance and operational requirements into fit-for-purpose technical solutions.

The role requires experience supporting large-scale cyber security uplift, risk remediation, vulnerability management, identity and access management, security operations and technology transformation initiatives within complex ICT environments

Analyse and document business, functional and technical requirements supporting cyber security uplift initiatives.

Develop system specifications and solution designs to support security remediation and risk reduction activities.

Support delivery of cyber security initiatives across vulnerability management, identity and access management, security monitoring and compliance workstreams.

Analyse existing ICT systems to identify security gaps, process inefficiencies and improvement opportunities.

Develop process models, integration diagrams, data flows and system artefacts supporting cyber security outcomes.

Collaborate with cyber security, infrastructure, engineering and operations teams to align business requirements with technical solutions.

Support accreditation, assurance and compliance activities by documenting system functionality, controls and dependencies.

Perform detailed analysis and evaluation of business processes and requirements

create solution designs and implement solutions to meet business needs

create and maintain solution documents

support daily operations and monitor performance of business solutions

adhere to delivery and support methodologies and contribute ideas for improvement

perform detailed technical application assessments considering feasibility, resource effort, risks and benefits

conduct testing activities such as test planning, execution coverage reviews and defect management

collaborate with stakeholders to define tasks, resolve issues, solve problems and ensure effective and timely implementation of projects

undertake project quality management tasks such as peer and quality reviews of specifications, design and testing documents

review research, process models and documentation of other staff, providing guidance and feedback

resolve or escalated issues as required and suggest alternative approaches and solutions

perform cost analysis activities as required

manage the life cycle of changes and improvements to systems

manage a team to increase performance and engagement through:

coaching

capability development

performance management

health and well-being support

set priorities, manage resources, and assist with the development of work plans

act with integrity by promoting workplace practices aligned with the APS Values and the APS Code of Conduct

exercise delegations in line with legislation and guidelines as required.

Knowledge / Qualifications

Cyber security knowledge and experience

Protective Security Policy Framework (PSPF)

Information Security Manual (ISM)

National Institute of Standards and Technology (NIST)

Demonstrated experience analysing and translating cyber security, compliance and operational requirements into technical solutions that support cyber uplift, risk reduction and regulatory obligations within large and complex ICT environments.

Demonstrated experience supporting large-scale cyber security uplift programs, including initiatives associated with vulnerability management, security risk remediation, identity and access management, security operations, cloud security, accreditation, compliance and cyber resilience outcomes.

Feasibility assessment FEAS - Level 4

Requirements definition and management REQM - Level 4

Technical skills to be Cont'd

Microsoft Sentinel or equivalent Security Information Event Management solutions.

Cloud platforms and services:

Amazon Web Services

Enterprise application and infrastructure architectures.

System integration, interface analysis and data flow modelling.

Business process modelling and requirements management tools.

Security architecture concepts and security control implementation.

System accreditation and assurance artefacts:

System Security Plans (SSPs)

Security Risk Assessments (SRAs).

Requirements

Criteria

The buyer has specified that each candidate must provide a one page pitch to address all criteria specified. This is equal to 5000 characters.

Demonstrated experience delivering cyber security uplift, cyber resilience, security remediation or compliance initiatives within large and complex ICT environments, preferably within Australian Government or other regulated environments

Demonstrated and proven experience performing the duties and responsibilities relevant to the role being applied for, including the required technical skills, technologies, frameworks and methodologies identified in the RFQ

Demonstrated experience applying cyber security frameworks, policies and standards, including the Protective Security Policy Framework (PSPF), Information Security Manual (ISM), Essential Eight and other relevant security and risk management frameworks.

Demonstrated ability to engage, influence and collaborate with a broad range of stakeholders, including senior executives, technical specialists, business representatives and external providers

Must hold and maintain a current Negative Vetting Level 1 (NV1) Security Clearance.

Demonstrated experience delivering cyber security, infrastructure, ICT transformation or uplift activities within Services Australia or other Australian Government agencies.

Demonstrated experience identifying, assessing and managing cyber security risks, vulnerabilities, compliance obligations and remediation activities.

Experience working within large-scale enterprise environments involving cloud platforms, identity and access management, security operations, infrastructure, applications and data services.

Demonstrated ability to deliver outcomes within tight timeframes while managing competing priorities, dependencies and stakeholder expectations. Demonstrated ability to communicate complex technical and cyber security concepts to both technical and non-technical audiences and contribute to capability uplift through mentoring, collaboration and knowledge transfer activities