Senior Business Analyst - Insider Risk

Paxus; Geehi; On-site; AUD 140,000 - 190,000; Full time

Job summary

Paxus is seeking a Senior Cyber Security Business Analyst to join its Technology team and strengthen its Insider Risk approach. The role translates complex policy, data protection and regulatory requirements into practical security workflows and operational processes.

The successful candidate will collaborate with security engineering, IT and business stakeholders across portfolios to deliver cohesive solutions and drive cross‑team adoption of security initiatives.

Qualifications

• 10+ years in IT business analysis, including 6+ years leading dedicated cyber security projects.
• Experience in large, complex organisations.
• Strong knowledge of data loss prevention, cloud security, identity and access management and zero trust principles.
• Sound understanding of infrastructure and application security, SIEM, end user computing, Active Directory and Entra ID.

Responsibilities

• Gather, document and analyse business, compliance and technical requirements for insider risk initiatives.
• Convert complex cyber and behavioural risk information into clear processes, policy requirements and practical technical controls.
• Build strong working relationships with stakeholders across Cyber Security, Technology and the wider business, including infrastructure and end user computing teams.
• Map end-to-end workflows covering the detection, investigation, containment and reporting of suspicious internal activity.
• Define functional requirements for integrations between security tooling and the organisation's IT service management platform.
• Work with security engineers and architects to refine detection use cases, reduce false positives and maintain data privacy compliance.

Tools

SIEM

Active Directory

Entra ID

ITSM platform

Job description

A Major Australian Retailer is seeking a Senior Cyber Security Business Analyst to join its Technology team and strengthen its approach to Insider Risk. This senior role turns complex policy, data protection and regulatory requirements into practical security workflows and operational processes.

Working across multiple portfolios, the successful candidate will bring a high degree of seniority, influence and insight. They will partner with a range of technical and business stakeholders to deliver cohesive solutions and drive strong cross-team collaboration.

Responsibilities

• Gather, document and analyse business, compliance and technical requirements for insider risk initiatives
• Convert complex cyber and behavioural risk information into clear processes, policy requirements and practical technical controls
• Build strong working relationships with stakeholders across Cyber Security, Technology and the wider business, including infrastructure and end user computing teams
• Map end-to-end workflows covering the detection, investigation, containment and reporting of suspicious internal activity
• Define functional requirements for integrations between security tooling and the organisation's IT service management platform
• Work with security engineers and architects to refine detection use cases, reduce false positives and maintain data privacy compliance

Requirements

• 10+ years in IT business analysis, including 6+ years leading dedicated cyber security projects
• Experience working in large, complex organisations
• Strong knowledge of data loss prevention, cloud security, identity and access management and zero trust principles
• Sound understanding of infrastructure and application security, SIEM, end user computing, Active Directory and Entra ID
• Demonstrated experience delivering both technical and process change
• Ability to bring cross-functional teams together and drive adoption of security initiatives

Paxus values diversity and welcomes applications from Indigenous Australians, people from diverse cultural and linguistic backgrounds, and people living with a disability. The recruitment and selection process varies, and some roles may include completion of pre-employment assessments, in-person or online interviews, psychometric testing, written assessments, scenario-based tasks, presentations, and pre-employment checks such as medical (including drug and alcohol), criminal history, or financial. If you require an adjustment to any part of the recruitment process, including the application form or assessments completed in an alternate format, please contact me using the above details. As part of our ongoing commitment to accessibility, the Paxus website has been independently audited against (WCAG) 2.2 Level AA, with ongoing improvements continuously being made to enhance accessibility. If you experience any difficulties, please contact me on the above details.