: DevSecOps Business Analyst

- Gather, analyze, and document business, security, and compliance requirements for DevSecOps initiatives and secure software development practices.

- Collaborate with development, security, QA, and operations teams to define requirements for CI/CD security controls, Secure Code Scanning (SAST), Software Composition Analysis (SCA), and vulnerability remediation processes.

- Translate business and security requirements into user stories, process flows, functional specifications, and acceptance criteria.

- Facilitate workshops with stakeholders to identify security risks, control gaps, and opportunities for automation across the Software Development Lifecycle (SDLC).

- Support onboarding of applications into DevSecOps toolchains, including secure code scanning, secrets management, container security, and compliance monitoring solutions.

- Track and report security findings, remediation status, risk exceptions, and compliance metrics while ensuring alignment with governance requirements.

- Prepare SOPs, process documentation, dashboards, and executive reports to drive continuous improvement and DevSecOps maturity across the organization.

📌 DevSecOps Business Analyst (Sydney)
🏢 Xpt Software Australia
📍 Sydney