Senior Business Analyst, Frontier Ai & Cyber Security

Upperground By Hudson; Sydney; On-site; AUD 154,000 - 178,000; Full time

Benefits offered by this job

Salary packaging

Parental leave

Udemy access

Professional development

Employee discounts

Job summary

Upperground By Hudson in Sydney is seeking a Senior Business Analyst focused on Frontier AI Cyber Security for a temporary, full-time role onsite at the Silverwater Corporate Office. You will collaborate with security leaders, project teams, solution architects and vendors to embed security-by-design across initiatives.

Requirements: 5+ years in cyber/information security, strong risk assessment skills, and knowledge of ISO 27001, NIST and Zero Trust.

Qualifications

• At least 5 years of experience in cyber security or information security.
• Experience reviewing architectures, technology implementations, integrations and data flows.
• Experience conducting information security and third-party risk assessments.
• Familiarity with security frameworks such as ISO27001, NIST, OWASP and Zero Trust.

Responsibilities

• Conduct information security assurance reviews across initiatives, embedding security-by-design throughout the lifecycle.
• Develop and communicate security requirements and guidance for projects and third-party engagements.
• Identify security risks and recommend pragmatic controls and risk treatment options.
• Perform third-party risk assessments and review security evidence for informed decisions.
• Review architectures and data flows to ensure alignment with security standards and best practices.
• Coordinate security assessment activities including vulnerability assessments and testing.

Skills

Information security

Risk assessment

Stakeholder engagement

Vendor management

Security governance

Job description

Senior Business Analyst Frontier AI Cyber Security

Location: Sydney

Contract: Temporary (up to 31 October 2028) full-time opportunity

Salary: $154,231 to $178,369 + super

About the role

Reporting to the Cyber Security Assurance Manager and based onsite at the Silverwater Corporate Office, you will work closely with security leaders, project teams, solution architects, business stakeholders and vendors to embed security-by-design principles across business and technology initiatives. Acting as a trusted security advisor, you will assess proposed solutions, identify security risks and recommend practical controls that support secure business outcomes.

Responsibilities

• Conduct Information Security Assurance reviews across business and technology initiatives, ensuring security-by-design principles are embedded throughout the project lifecycle from initiation through to implementation and closure.
• Develop, maintain and communicate security requirements, assessment criteria, standards and assurance guidance to support the consistent application of security controls across projects and third‑party engagements.
• Partner with solution architects, project teams, business stakeholders and vendors to identify security risks, assess potential business impact and recommend pragmatic security controls and risk treatment options.
• Perform Third Party Risk Assessments (TPRA) of vendors, products and services, including the review of security questionnaires, certifications, audit reports and supporting evidence to support informed risk‑based decision‑making.
• Review solution architectures, designs, integrations, data flows and technology implementations to ensure alignment with organisational security requirements, standards and industry best practices.
• Coordinate and perform security assessment activities including vulnerability assessments, security configuration reviews, web application security testing, external penetration testing engagements etc.
• Review security assessment findings and work with project teams, vendors and stakeholders to ensure identified vulnerabilities, weaknesses and security risks are appropriately remediated or formally accepted.
• Perform Information Security Risk Assessments (ISRA) for projects, technology implementations and business initiatives in accordance with Harvey Norman's risk management framework.
• Document, track, monitor and elevate identified security risks through established governance processes, ensuring remediation activities, mitigation plans and risk acceptance decisions are managed through to closure.
• Contribute to the continuous improvement and maturity of the Information Security Assurance function through the adoption of industry best practices and enhancement of assurance methodologies, templates and processes.

About you

You are a proactive cyber security professional who can balance security requirements with business needs and provide practical, risk‑based advice to stakeholders. With strong analytical skills, sound judgement and attention to detail, you take a risk‑based approach and remain current with emerging cyber threats, technologies and industry practices.

Qualifications

• At least 5 years' experience in cyber security, information security assurance, risk management or a related area.
• Experience reviewing solution architectures, technology implementations, integrations and data flows.
• Experience conducting information security and third‑party risk assessments.
• Exposure to vulnerability assessments, security reviews and penetration testing activities.
• Sound knowledge of security frameworks and practices such as ISO 27001, NIST Cybersecurity Framework, OWASP, Identity and Access management, Zero Trust etc.
• An understanding of security principles across cloud, infrastructure, networks, applications and integrations.
• Strong stakeholder engagement, communication and influencing skills.
• The ability to manage multiple projects and competing priorities in a fast‑paced environment.

Benefits and perks

• Salary packaging and novated leasing options for eligible employees.
• Company‑paid parental leave for eligible employees.
• Access to Udemy, an online training platform with over 5,500 courses.
• Professional development and career progression.
• Experience working with an iconic Australian Brand with global success in NZ, Asia, and Europe.
• A supportive team environment that celebrates diversity and promotes a healthy work and family life balance.
• Opportunities to make discounted purchases on a great range of products and services.

Equal opportunity statement

We encourage and support applications from people with disability. Please reach out to us to discuss any accommodations or adjustments that may be needed during the recruitment process, ensuring that you have every opportunity to showcase your talent, skills and potential. We welcome and encourage applicants from diverse backgrounds, including Aboriginal and Torres Strait Islander peoples, culturally and linguistically diverse background, those living with a disability and from the LGBTQ+ community. We are committed to equity, diversity and inclusion and we do not discriminate based on race, colour, religion, gender, age, national or ethnic background, socio‑economic status, or any standard protected class.

Eligibility and compliance

Please note that only people with the right to work in Australia should apply for this position. This role is subject to standard pre‑employment checks, including a criminal record check. We may require a valid Australian working visa for the duration of the appointment.