Senior Systems Analyst (Cyber Uplift)

Profectus; Sydney; On-site; AUD 120,000 - 170,000; Full time

Job summary

Profectus is seeking multiple experienced Senior Systems Analysts to support a cyber security uplift program within an Australian Government agency. You will analyse, design and document ICT solutions that turn cyber security, compliance and operational requirements into technical requirements aligned with the agency’s architectures.

The role covers requirements analysis, solution design, security remediation and accreditation support, with responsibilities spanning risk reduction, SSP/SRA

Qualifications

• Senior systems analysis experience at EL1 level or equivalent.
• Translating cyber security, compliance and operational requirements into technical solutions in large ICT environments.
• Experience supporting large-scale cyber security uplift programs including vulnerability management, risk remediation, identity and access management, security operations, cloud security and accreditation.
• Applying PSPF, ISM, Essential Eight and NIST.
• Requirements definition and management, systems design, software design and feasibility assessment (SFIA Level 4).
• System integration, interface analysis and data flow modelling.
• Producing or contributing to System Security Plans (SSPs) and Security Risk Assessments (SRAs).
• Engaging with senior executives, technical specialists, business representatives and external providers.
• Cyber security, infrastructure or ICT transformation work within Australian Government agencies.

Responsibilities

• Analyse and document business, functional and technical requirements for cyber security uplift initiatives
• Develop system specifications and solution designs for security remediation and risk reduction activities
• Support vulnerability management, identity and access management, security monitoring and compliance workstreams
• Assess existing ICT systems to identify security gaps, process inefficiencies and improvement opportunities
• Produce process models, integration diagrams, data flows and other system artefacts
• Document system functionality, controls and dependencies to support accreditation and assurance activities
• Carry out technical application assessments covering feasibility, effort, risks, benefits and cost
• Plan and conduct testing activities, including coverage reviews and defect management
• Peer review specifications, designs and test documentation, and provide guidance to other staff
• Manage the life cycle of changes and improvements to systems
• Work with cyber security, infrastructure, engineering and operations teams to align requirements with technical solutions
• Lead and coach team members, set priorities and help develop work plans

Skills

EL1 level

Cyber security

Requirements management

Stakeholder engagement

System architecture

Tools

Microsoft Sentinel

Job description

Profectus is seeking multiple experienced Senior Systems Analysts to support a cyber security uplift program within an Australian Government agency. You will analyse, design and document ICT solutions that turn cyber security, compliance and operational requirements into technical requirements aligned with the agency’s architectures. The work covers requirements analysis, solution design, security remediation and accreditation support.

Key Responsibilities

• Analyse and document business, functional and technical requirements for cyber security uplift initiatives
• Develop system specifications and solution designs for security remediation and risk reduction activities
• Support vulnerability management, identity and access management, security monitoring and compliance workstreams
• Assess existing ICT systems to identify security gaps, process inefficiencies and improvement opportunities
• Produce process models, integration diagrams, data flows and other system artefacts
• Document system functionality, controls and dependencies to support accreditation and assurance activities
• Carry out technical application assessments covering feasibility, effort, risks, benefits and cost
• Plan and conduct testing activities, including coverage reviews and defect management
• Peer review specifications, designs and test documentation, and provide guidance to other staff
• Manage the life cycle of changes and improvements to systems
• Work with cyber security, infrastructure, engineering and operations teams to align requirements with technical solutions
• Lead and coach team members, set priorities and help develop work plans

Required Experience

• Senior systems analysis experience at EL1 level or equivalent
• Translating cyber security, compliance and operational requirements into technical solutions in large ICT environments
• Supporting large-scale cyber security uplift programs, including vulnerability management, risk remediation, identity and access management, security operations, cloud security and accreditation
• Applying the Protective Security Policy Framework (PSPF), Information Security Manual (ISM), Essential Eight and NIST
• Requirements definition and management, systems design, software design and feasibility assessment (SFIA Level 4)
• System integration, interface analysis and data flow modelling
• Producing or contributing to System Security Plans (SSPs) and Security Risk Assessments (SRAs)
• Engaging with senior executives, technical specialists, business representatives and external providers
• Cyber security, infrastructure or ICT transformation work within Australian Government agencies
• Microsoft Sentinel or another SIEM solution
• Microsoft Azure, AWS or Google Cloud Platform
• Security architecture concepts and security control implementation
• Business process modelling and requirements management tools
• Explaining technical and cyber security concepts to non-technical audiences, and mentoring other staff

Security Clearance Requirements

• Must be an Australian Citizen
• Must have a current AGSVA NV1 Security Clearance

Why Profectus

Profectus partners with Australian Government agencies to deliver trusted ICT capability across complex delivery programs. We take a long term, relationship driven approach, supporting our people across the full lifecycle of their engagement while contributing to outcomes of national importance.