Job details
Business Analysts seek to understanding business processes and determining business requirements for systems.
Business Analysts (Security) identify opportunities to improve business models, operations, services and processes. They collaborate with stakeholders across the agency to clarify problems, explore opportunities, and support informed decision-making.
Senior Business Analysts (Security) lead complex analysis, and requirements work across workstreams to support delivery decisions.
They manage competing stakeholder needs, establish analysis approaches, and ensure requirements and traceability are effectively managed. They contribute to governance, risk and quality activities for programs.
Key duties and responsibilities
- ensure Business, system requirements, policy compliance and user needs are clearly defined and documented with clear, testable acceptance criteria.
- extensive experience in the analysis of complex business problems in large scale, transformational and compliance program of work within a government context
- autonomously under guidance of the program manager to engage with a broader range of stakeholders to understand the operating and delivery context, eliciting complex requirements, nuance and areas for operational improvement.
- have a practical understanding and experience of cyber security related operations and government cyber security policy including protective security policy framework, information security manual and essential 8 strategies.
- collaborate with others to clearly define and clarify business needs to create an action plan, solution report or business case for consideration of senior staff
- liaise with a range of stakeholder to understand, elicit and analyse their core requirements and concerns to meet their needs and the agency's cyber security operational and compliance objectives
- implement business analysis approaches that may include specifying team roles, deliverables, analysis techniques or stakeholder communication
- assess the current state of the cyber operations to identify and recommend improvements for consideration by senior staff and provide strong analysis, verification and validation on the recommended improvements
- conduct stakeholder analysis to increase engagement with a range of key stakeholders to effectively understand cross business functions
- identify operational processes, workflows and use cases for automation to improve operational productivity and reduce investment of labour in low value, low complexity tasks.
- develop process and workflow diagrams and apply lean principles to reduce unnecessary steps and effort to outcome.
- facilitate and lead communication across business units with a range of key stakeholders and represent the agency at a range internal and external forums
- develop requirements and communication through scope, traceability and maintenance
- lead and manage the development of the requirements traceability matrix, including testing and quality checking activities
- prepare and implement change management plans and/or communication plans
- prepare, perform and coordinate elicitation requirement techniques such as brainstorming, workshops, prototyping, observation or interviews, and confirm or report on results
- prepare, review and contribute to clear business and stakeholder requirement documentation including prioritising, organising and verifying the requirements
- lead the examination and organisation of requirements to record and identify dependencies, relationships and logical sequences
- define the process that will be used to approve requirements for implementation and manage change to the solutions or requirements scope
- review and consider project documentation and agency processes to determine deliverables
- conduct risk analysis and problem tracking to mitigate potential issues
- prepare and implement requirements management plan, including testing and quality assurance strategies and activities
- implement performance metrics and reporting tools to effectively measure work, outputs, and objectives
- specify and model requirements through analysis using textual statements, matrices, diagrams, and formal models
- identify business analyst deliverables, the scope of work for the business analysis activities, resource allocation and estimates for business analyst work
- promote the reason for a business change or capability that is required for the agency and/or contribute to the capability gap analysis
- assess and validate solutions to determine how closely the solution meets the agency’s objectives
- develop clear and defined work plans and timeframes for self and team in the context of business priorities.
- Mentor staff including coaching and guidance to build knowledge and capability
- Cyber security knowledge and experience
- Protective Security Policy Framework (PSPF)
- Information Security Manual (ISM)
- Essential 8 Strategies
- National Institute of Standards and Technology (NIST)
- Business modelling BSMO – Level 4
- Business process improvement BPRE – Level 5
- Business situation analysis BUSA – Level 4
- Feasibility assessment FEAS – Level 3
- Requirements definition and management REQM – Level 4
- Stakeholder relationship management RLMT – Level 5
Vulnerability scanning tools: o Rapid7 o Tenable o Windows Defender o Forescout o Sentinel o any additional tools
Essential criteria
- Demonstrated experience in cyber resilience, security remediation or compliance initiatives within large and complex ICT environments, preferably within Australian Government or other regulated environments.
- Demonstrated and proven experience performing the duties and responsibilities relevant to the role being applied for, including the required technical skills, technologies, frameworks and methodologies identified in the RFQ
- Demonstrated experience applying cyber security frameworks, policies and standards, including the Protective Security Policy Framework (PSPF), Information Security Manual (ISM), Essential Eight and other relevant security and risk management frameworks.
- Demonstrated ability to engage, influence and collaborate with a broad range of stakeholders, including senior executives, technical specialists, business representatives and external providers.
- Demonstrated experience delivering cyber security, infrastructure, ICT transformation or uplift activities within government agencies or complex ICT environments
- Experience working within large-scale enterprise environments involving cloud platforms, identity and access management, security operations, infrastructure, applications and data services
- Demonstrated ability to deliver outcomes within tight timeframes while managing competing priorities, dependencies and stakeholder expectations.
- Demonstrated ability to communicate complex technical and cyber security concepts to both technical and non-technical audiences and contribute to capability uplift through mentoring, collaboration and knowledge transfer activities.
Security Required: NV1 Security clearance required
Location - QLD, ACT, VIC, NSW, SA, Hybrid
How to Apply - Please upload your resume to apply. Candidates will need to be willing to undergo pre-employment screening checks which may include, ID and work rights, security clearance verification and any other client requested checks
Closing date: Wednesday 18 November 2026
Call Joanne Finchett on 0480 002454 or email Joanne@whizdom.com.au for any further information
