Senior DevSecOps Business Analyst – Sydney

Ayan Infotech; Sydney; On-site; AUD 120,000 - 180,000; Full time

Job summary

AYAN InfoTech is looking for a DevSecOps Business Analyst to join a Sydney-based project. The role involves gathering and documenting security, compliance, and DevSecOps requirements, and working with cross-functional teams to implement CI/CD security controls.

The ideal candidate has 7+ years of experience, can translate complex security needs into user stories, and will help drive governance, onboarding, and maturity across the SDLC.

Qualifications

• Defining DevSecOps requirements including security, compliance, and governance.
• Translating business and security needs into user stories and acceptance criteria.
• Collaborating with development, security, QA, and ops teams to implement controls.

Responsibilities

• Gather, analyze, and document business, security, and compliance requirements for DevSecOps initiatives.
• Collaborate with development, security, QA, and operations teams to define requirements for CI/CD security controls, SAST, SCA, and remediation processes.
• Translate requirements into user stories, flows, specs, and acceptance criteria.
• Facilitate workshops to identify security risks and automation opportunities across the SDLC.
• Support onboarding of apps into DevSecOps toolchains including secure code scanning and secrets management.
• Track and report findings, remediation status, risk exceptions, and compliance metrics with governance alignment.
• Prepare SOPs, process docs, dashboards, and executive reports to drive DevSecOps maturity.

Skills

DevSecOps

Business Analysis

CI/CD Security

SAST

SCA

Vulnerability Remediation

Security Governance

Workshop Facilitation

Documentation

SDLC

Job description

AYAN InfoTech is looking for a DevSecOps Business Analyst to join a Sydney-based project. The role involves gathering and documenting security, compliance, and DevSecOps requirements, and working with cross-functional teams to implement CI/CD security controls.

The ideal candidate has 7+ years of experience, can translate complex security needs into user stories, and will help drive governance, onboarding, and maturity across the SDLC.