Cyber Security Business Analyst (8-Month Contract)| Hybrid (2 Days Onsite) | Potential Extension

Are you an experienced Cyber Security Business Analyst looking to make a meaningful impact within a large-scale security transformation program?

We are seeking a highly capable Cyber Security BA to join a critical cyber and information security initiative within a progressive local government environment. This role will support the delivery of major security uplift activities, including the development of a future-state Cyber Security Operating Model and ongoing Essential Eight maturity initiatives.

This is an initial 8-month contract through to the end of the financial year, with solid potential for extension based on project outcomes and future program requirements.

The Opportunity

As a key member of the Trusted & Secure Program team, you will work closely with security, technology, risk, governance, and business stakeholders to translate complex cyber security requirements into practical business outcomes.

This is not a generalist Business Analyst position. We are specifically seeking a BA with proven experience delivering projects within cyber security, information security, risk, compliance, or security transformation environments.

Key Responsibilities

- Elicit, analyse, and document cyber security and information security business requirements.

- Support the delivery of the Trusted & Secure Program and associated security uplift initiatives.

- Contribute to the design and development of a future Cyber Security Operating Model.

- Facilitate workshops and stakeholder engagement sessions across technical and business teams.

- Analyse current-state processes, controls, policies, and security operating procedures.

- Develop business requirements, process maps, user stories, functional specifications, and gap analyses.





- Support the delivery and tracking of Essential Eight remediation activities.

- Work closely with cyber security specialists, architects, project managers, risk teams, and executive stakeholders.

- Assist with governance, compliance, risk management, and reporting activities.

- Ensure business outcomes align with organisational security objectives, regulatory obligations, and best practices.

Required Experience & Skills

Essential

- Proven experience as a Business Analyst within Cyber Security or Information Security programs.

- Strong understanding of cyber security principles, frameworks, and operating models.

- Experience supporting security uplift, risk management, governance, or compliance initiatives.

- Demonstrated involvement in security maturity and remediation programs.

- Experience gathering and documenting complex business and technical requirements.

- Strong stakeholder management and workshop facilitation skills.

- Ability to communicate effectively with both technical and non-technical audiences.

Highly Desirable

- Experience delivering initiatives aligned to the Essential Eight framework.

- Exposure to security operating model design and implementation.

- Understanding of cyber governance, risk, and compliance frameworks.

- Experience working within government, local government, regulated, or public sector environments.

- Knowledge of security standards such as:

- Essential Eight

- ISO 27001

- NIST Cyber Security Framework

- Victorian Protective Data Security Standards (VPDSS)

Location

Minimum of 2 days per week onsite in Melton, Victoria

Remaining days can be worked remotely

Apply Now

If you are a Cyber Security Business Analyst with hands-on experience supporting security transformation, Essential Eight initiatives, or cyber operating model development, we'd love to hear from you.

📌 Cyber Security Business Analyst (Melton)
🏢 Logicalis Australia
📍 Melton