Seeking a Business Analyst experience working within cloud platforms, identity and access management, security operations, infrastructure, applications and data services
Job details
Business Analysts seek to understanding business processes and determining business requirements for systems.
Business Analysts (Security) identify opportunities to improve business models, operations, services and processes.
They collaborate with stakeholders across the agency to clarify problems, explore opportunities, and support informed decision-making.
Senior Business Analysts (Security) lead complex analysis, and requirements work across workstreams to support delivery decisions.
They manage competing stakeholder needs, establish analysis approaches, and ensure requirements and traceability are effectively managed.
They contribute to governance, risk and quality activities for programs.
Key duties and responsibilities
ensure Business, system requirements, policy compliance and user needs are clearly defined and documented with clear, testable acceptance criteria.
extensive experience in the analysis of complex business problems in large scale, transformational and compliance program of work within a government context
autonomously under guidance of the program manager to engage with a broader range of stakeholders to understand the operating and delivery context, eliciting complex requirements, nuance and areas for operational improvement.
have a practical understanding and experience of cyber security related operations and government cyber security policy including protective security policy framework, information security manual and essential 8 strategies.
collaborate with others to clearly define and clarify business needs to create an action plan, solution report or business case for consideration of senior staff
liaise with a range of stakeholder to understand, elicit and analyse their core requirements and concerns to meet their needs and the agency's cyber security operational and compliance objectives
implement business analysis approaches that may include specifying team roles, deliverables, analysis techniques or stakeholder communication
assess the current state of the cyber operations to identify and recommend improvements for consideration by senior staff and provide robust analysis, verification and validation on the recommended improvements
conduct stakeholder analysis to increase engagement with a range of key stakeholders to effectively understand cross business functions
identify operational processes, workflows and use cases for automation to improve operational productivity and reduce investment of labour in low value, low complexity tasks.




develop process and workflow diagrams and apply lean principles to reduce unnecessary steps and effort to outcome.
facilitate and lead communication across business units with a range of key stakeholders and represent the agency at a range internal and external forums
develop requirements and communication through scope, traceability and maintenance
lead and manage the development of the requirements traceability matrix, including testing and quality checking activities
prepare and implement change management plans and/or communication plans
prepare, perform and coordinate elicitation requirement techniques such as brainstorming, workshops, prototyping, observation or interviews, and confirm or report on results
prepare, review and contribute to explicit business and stakeholder requirement documentation including prioritising, organising and verifying the requirements
lead the examination and organisation of requirements to record and identify dependencies, relationships and logical sequences
define the process that will be used to approve requirements for implementation and manage change to the solutions or requirements scope
review and consider project documentation and agency processes to determine deliverables
conduct risk analysis and problem tracking to mitigate potential issues
prepare and implement requirements management plan, including testing and quality assurance strategies and activities
implement performance metrics and reporting tools to effectively measure work, outputs, and objectives
specify and model requirements through analysis using textual statements, matrices, diagrams, and formal models
identify business analyst deliverables, the scope of work for the business analysis activities, resource allocation and estimates for business analyst work
promote the reason for a business change or capability that is required for the agency and/or contribute to the capability gap analysis
assess and validate solutions to determine how closely the solution meets the agency's objectives
develop clear and defined work plans and timeframes for self and team in the context of business priorities.
Mentor staff including coaching and guidance to build knowledge and capability
Knowledge / Qualifications
Cyber security knowledge and experience
Protective Security Policy Framework (PSPF)
Information Security Manual (ISM)




Essential 8 Strategies
National Institute of Standards and Technology (NIST)
Business modelling BSMO – Level 4
Business process improvement BPRE – Level 5
Business situation analysis BUSA – Level 4
Feasibility assessment FEAS – Level 3
Requirements definition and management REQM – Level 4
Stakeholder relationship management RLMT – Level 5
Technical skills
Vulnerability scanning tools: o Rapid7 o Tenable o Windows Defender o Forescout o Sentinel o any additional tools
Essential criteria
Demonstrated experience in cyber resilience, security remediation or compliance initiatives within large and complex ICT environments, preferably within Australian Government or other regulated environments.
Demonstrated and proven experience performing the duties and responsibilities relevant to the role being applied for, including the required technical skills, technologies, frameworks and methodologies identified in the RFQ
Demonstrated experience applying cyber security frameworks, policies and standards, including the Protective Security Policy Framework (PSPF), Information Security Manual (ISM), Essential Eight and other relevant security and risk management frameworks.
Demonstrated ability to engage, influence and collaborate with a broad range of stakeholders, including senior executives, technical specialists, business representatives and external providers.
Desirable criteria
Demonstrated experience delivering cyber security, infrastructure, ICT transformation or uplift activities within government agencies or complex ICT environments
Experience working within large-scale enterprise environments involving cloud platforms, identity and access management, security operations, infrastructure, applications and data services
Demonstrated ability to deliver outcomes within tight timeframes while managing competing priorities, dependencies and stakeholder expectations.
Demonstrated ability to communicate complex technical and cyber security concepts to both technical and non-technical audiences and contribute to capability uplift through mentoring, collaboration and knowledge transfer activities.
Contract:
12 Months Contract with 2 x 12 months extension option
Security Required:
NV1 Security clearance required
Location -
QLD, ACT, VIC, NSW, SA, Hybrid
How to Apply -
Please upload your resume to apply.
Candidates will need to be willing to undergo pre-employment screening checks which may include, ID and work rights, security clearance verification and any other client requested checks
Closing date:
Wednesday 18 November ****
Call Joanne Finchett on *********** or email ****** for any further information

📌 Business Analyst (Canberra)
🏢 Whizdom Recruitment
📍 Canberra