Senior Systems Analyst - Cyber Security

GoSourcing; Brisbane; Híbrido; AUD 140.000 - 180.000; Jornada completa

Descripción de la vacante

GoSourcing is recruiting a Senior Systems Analyst (EL1) for a Federal Government client to drive ICT security uplift, analyse requirements, and design solutions across vulnerability management, IAM, and security operations.

You will work with business stakeholders, architects, engineers and delivery teams to translate security and compliance needs into fit-for-purpose technical solutions and documentation.

Formación

• Experience in analysing and translating cyber security, compliance and operational requirements into technical solutions.
• Experience supporting large-scale cyber security uplift programs and risk remediation.
• Familiar with PSPF, ISM, Essential Eight, NIST frameworks.

Responsabilidades

• Analyse and document business, functional and technical requirements for cyber uplift initiatives.
• Develop system specs and designs to support remediation and risk reduction.
• Support accreditation, compliance, and security monitoring activities.
• Collaborate with security, infra, engineering, and operations teams.

Conocimientos

Cyber security knowledge

Vulnerability management

Identity and access management

Security operations

Cloud security

Accreditation & compliance

Risk analysis

System design

Educación

FEAS – Level 4

REQM – Level 4

SWDN – Level 4

DESN – Level 4

Herramientas

Microsoft Sentinel

Azure

AWS

GCP

SSP

SRA

Descripción del empleo

Federal Govt client is at the frontline of government service delivery, supporting millions of Australians is seeking Senior Systems Analysts (EL1 level) are responsible for analysing, designing and documenting ICT solutions that support the Agency’s Cyber Uplift Program and broader cyber security objectives. They work closely with business stakeholders, architects, engineers, security specialists and delivery teams to translate cyber security, compliance and operational requirements into fit-for-purpose technical solutions.

The role requires experience supporting large-scale cyber security uplift, risk remediation, vulnerability management, identity and access management, security operations and technology transformation initiatives within complex ICT environments

Key duties and responsibilities

• Analyse and document business, functional and technical requirements supporting cyber security uplift initiatives.
• Develop system specifications and solution designs to support security remediation and risk reduction activities.
• Support delivery of cyber security initiatives across vulnerability management, identity and access management, security monitoring and compliance workstreams.
• Analyse existing ICT systems to identify security gaps, process inefficiencies and improvement opportunities.
• Develop process models, integration diagrams, data flows and system artefacts supporting cyber security outcomes.
• Collaborate with cyber security, infrastructure, engineering and operations teams to align business requirements with technical solutions.
• Support accreditation, assurance and compliance activities by documenting system functionality, controls and dependencies.
• Perform detailed analysis and evaluation of business processes and requirements
• create solution designs and implement solutions to meet business needs
• create and maintain solution documents
• support daily operations and monitor performance of business solutions
• adhere to delivery and support methodologies and contribute ideas for improvement
• perform detailed technical application assessments considering feasibility, resource effort, risks and benefits
• conduct testing activities such as test planning, execution coverage reviews and defect management
• collaborate with stakeholders to define tasks, resolve issues, solve problems and ensure effective and timely implementation of projects
• undertake project quality management tasks such as peer and quality reviews of specifications, design and testing documents
• review research, process models and documentation of other staff, providing guidance and feedback
• resolve or elevate issues as required and suggest alternative approaches and solutions
• perform cost analysis activities as required
• manage the life cycle of changes and improvements to systems
• manage a team to increase performance and engagement through:
  • coaching
  • capability development
  • performance management
  • health and well-being support
• set priorities, manage resources, and assist with the development of work plans
• act with integrity by promoting workplace practices aligned with the APS Values and the APS Code of Conduct
• exercise delegations in line with legislation and guidelines as required.

Knowledge / Qualifications

• Cyber security knowledge and experience
  • Protective Security Policy Framework (PSPF)
  • Information Security Manual (ISM)
  • Essential Eight Strategies
  • National Institute of Standards and Technology (NIST)
• Demonstrated experience analysing and translating cyber security, compliance and operational requirements into technical solutions that support cyber uplift, risk reduction and regulatory obligations within large and complex ICT environments.
• Demonstrated experience supporting large-scale cyber security uplift programs, including initiatives associated with vulnerability management, security risk remediation, identity and access management, security operations, cloud security, accreditation, compliance and cyber resilience outcomes.
• Feasibility assessment FEAS – Level 4
• Requirements definition and management REQM – Level 4
• Software design SWDN – Level 4
• Systems design DESN – Level 4

Technical skills to be Cont’d

• Microsoft Sentinel or equivalent Security Information Event Management solutions.
• Cloud platforms and services:
  • Microsoft Azure
  • Amazon Web Services
  • Google Cloud Platform
• Enterprise application and infrastructure architectures.
• System integration, interface analysis and data flow modelling.
• Business process modelling and requirements management tools.
• Security architecture concepts and security control implementation.
• System accreditation and assurance artefacts:
  • System Security Plans (SSPs)
• Security Risk Assessments (SRAs).

Technical skills

Demonstrated experience applying business and systems analysis techniques to cyber security uplift initiatives, including vulnerability remediation, identity and access management, security monitoring, cloud security, compliance, accreditation and risk reduction activities.

Windows

Linux

Identity and Access Management (IAM) technologies and processes.

Vulnerability management platforms: o Rapid7 o Tenable o Microsoft Defender

Security monitoring and logging platforms;

Estimated start date

01 Feb 2027

Initial contract duration

12 months

Extension term details

maximum of 24months

Experience level

Senior El1

Location of work

QLD, ACT, VIC, NSW,SA

Working arrangements

Hybrid The Labour Hire Worker is expected to work onsite for the first 6 weeks before a hybrid flexible working arrangement may be considered. Any hybrid flexible working arrangement will require the Labour Hire Worker to work a minimum of 3 days per week in the designated office location and will also be on the provision that the Labour Hire Worker’s residing address is within reasonable travel time and distance of the RFQ location. The location is the capital city of selected state/s.

Security clearance

Must be an Australian Citizen with a Negative Vetting Level 1

Criteria

The buyer has specified that each candidate must provide a one page pitch to address all criteria specified. This is equal to 5000 characters.