Company Description Barely Viable Collective (BVC) is a network of senior practitioners with expertise in cybersecurity, cloud, data, and delivery. We emphasize progress over unnecessary complexity, helping organizations overcome scope creep and inefficiencies. At BVC, we focus on pragmatic solutions: identifying key constraints, implementing impactful changes, and iteratively improving based on measured results. Our approach ensures meaningful outcomes without compromising on quality. Role Description A major Australian financial services organisation needs a technical business analyst with an identity security background to document how its identity and access management processes actually run today. This is a hands-on process discovery and documentation role. You will review what already exists, run workshops and interviews with process owners and practitioners, and turn what you learn into clean swimlane process maps, RACIs and a register of every access provisioning pathway in use. The opportunity The IAM function has a mix of processes across identity lifecycle management, access management, multi-factor authentication, password management, privileged access management, role management, segregation of duties and user access reviews. You will come in, work out who owns and operates each process, get the right people in a room, and leave behind documentation the organisation can rely on: accurate current-state maps, transparent roles, and a complete picture of how access is actually provisioned, including the pathways that sit outside the documented process. A good fit for someone who has worked in or alongside an IAM team, understands joiner-mover-leaver, privileged access, RBAC, SoD and access review concepts well enough to ask the right questions,



and is disciplined about process notation and documentation quality. What you'll deliver
• Review existing IAM process maps, RACIs, policies, standards and supporting artefacts, and identify where they diverge from current practice
• Plan and facilitate discovery and validation workshops for undocumented processes, and targeted interviews with process owners for documented ones
• Confirm for each process its triggers, steps, decision points, handoffs, roles, tools and systems, inputs and outputs, timing and exceptions
• Produce or refresh current-state swimlane process maps in Visio (or an agreed equivalent) consistent with the client's existing notation and templates
• Identify and document all access provisioning pathways in use, including manual, automated and exception routes, and record variations from the documented process in a provisioning pathway register
• Validate drafts with process owners, incorporate a consolidated round of client review comments, and bring each deliverable to acceptance
• Maintain the stakeholder map, session schedule and progress tracking so the stream hits its milestones What this role is not
• It is not process redesign, re-engineering or remediation; you are documenting how things work today, not changing them
• It is not an IAM platform implementation or configuration role




• It is not a passive note-taking role; you will be expected to run the room, challenge vague answers, and own the quality of what gets produced Who we're looking for
• 3 to 5 years as a technical business analyst, process analyst or IAM consultant, with hands-on experience in identity and access management
• Understanding of IAM domains: identity lifecycle (joiner-mover-leaver), access request and approval, privileged access, MFA, password management, role-based access, segregation of duties and user access reviews
• Familiarity with how access is provisioned in practice in a large enterprise, including the manual and exception pathways
• Strong process documentation

skills:
swimlane mapping or equivalent notation, RACI development, and the discipline to keep documentation consistent across a large set of processes
• Confident workshop facilitator who can draw out how a process really runs from busy IAM, IT and application stakeholders
• Proficient with Microsoft Visio and strong in Word and Excel
• Organised and self-directed; comfortable managing a dense schedule of sessions to a fixed delivery timeline
• Familiarity with CPS 234 or ISO 27001 helps
• Bonus: hands-on experience with prior IAM process documentation or audit remediation work Logistics
• Start: as soon as possible
• Duration: approximately 4 months, 2 days a week
• Hybrid: onsite in Sydney CBD for workshops and interviews, remote for analysis and authoring
• Engaged as a contractor through Barely Viable Consulting
• Must be willing to complete the client's background screening and onboarding requirements prior to start

📌 Technical Business Analyst (Sydney)
🏢 BVC
📍 Sydney