• Type: Contract
• Job #18837

About the role

We are seeking an experienced Cyber Business Systems Analyst to support the successful delivery of a Security Information and Event Management (SIEM) initiative as part of a broader cyber security uplift programme.
 

Key responsibilities

• Plan and undertake business analysis activities across multiple work packages.
• Elicit, analyse and document business, functional and non-functional requirements.
• Conduct current-state assessments and support future-state design across people, processes and technology.
• Facilitate stakeholder workshops, interviews and working sessions to identify business needs, challenges and opportunities.
• Develop and maintain requirements documentation, process models, business rules and supporting artefacts.
• Document and analyse current-state (As-Is) and future-state (To-Be) business processes.
• Identify business and operational impacts, risks and dependencies associated with cyber security uplift activities.
• Support the development of implementation approaches, transition requirements and operational readiness activities.
• Contribute to capability maturity assessments, gap analysis and uplift planning.
• Identify opportunities to improve cyber security controls, processes and ways of working.
• Build and maintain productive relationships with business stakeholders, cyber security specialists, architects and technical teams.
• Facilitate discussions, resolve competing priorities and support consensus-building across stakeholder groups.
• Assist stakeholders in understanding proposed cyber security changes and their associated business impacts.
• Maintain requirements traceability throughout the delivery lifecycle.
• Support the prioritisation of requirements and delivery activities in line with programme objectives and risk reduction outcomes.
• Contribute to governance, reporting and assurance activities, ensuring compliance with departmental standards, methodologies and delivery frameworks.
• Undertake other duties as directed by the Project Manager.

Highly desirable criteria

• Experience supporting cyber security initiatives, including Security Operations Centre (SOC) maturity uplift, Essential Eight, Zero Trust, Secure by Design or similar programmes.
• Experience developing processes for security log source onboarding and security telemetry integration.
• Familiarity with cyber security monitoring and defence tools, such as Splunk, Microsoft Sentinel and Microsoft Defender.
• Familiarity with data lakes, data collection solutions and security telemetry management.
• Experience conducting capability assessments, gap analysis and operating model reviews.
• Experience working within Queensland Government or other large public sector environments.
• Experience working with Agile and hybrid delivery methodologies.

Desirable criteria

• Experience supporting the implementation or enhancement of Security Information and Event Management (SIEM) platforms.
• Understanding of Security Operations Centre processes, security monitoring and threat detection capabilities.
• Experience supporting technology integration, cyber security transformation or operational capability uplift initiatives.
• Knowledge of governance, assurance and risk management practices within complex ICT programmes.

Skills and experience

• Proven experience undertaking business analysis activities within complex ICT, cyber security or business transformation initiatives, particularly in Security Operations Centre (SOC) environments.
• Demonstrated ability to facilitate stakeholder workshops and conduct effective requirements elicitation.
• Strong experience documenting business processes, requirements, business rules and future-state designs.
• Excellent analytical, problem-solving and critical-thinking skills.
• Strong written and verbal communication skills, with the ability to translate complex technical concepts into clear business requirements.
• Proven stakeholder engagement and relationship management skills across business and technical teams.
• The ability to analyse complex business and technology environments, identify gaps and dependencies, and recommend practical solutions.
• Strong organisational skills and the ability to manage competing priorities across multiple work packages.
• A collaborative and proactive approach, with a focus on delivering outcomes aligned with programme objectives.