Senior Business Analyst - Cyber Security

About the role

Centorrino Technologies is looking for an experienced Senior Business Analyst to join an Agile, multidisciplinary team delivering cyber security, resilience and remediation initiatives across a large and complex ICT environment. The role strengthens cyber security posture, supports security compliance and improves business processes, technology and operations. It is an initial 12-month contract starting 1 February 2027, with hybrid working across QLD, ACT, VIC, NSW or SA.

Key responsibilities

• Lead and coordinate business analysis and requirements elicitation for cyber security and ICT initiatives
• Work with stakeholders to define requirements, identify process improvements and resolve competing priorities
• Maintain artefacts such as As-Is and To-Be process models, user stories, use cases, data flow diagrams and test cases
• Support cyber resilience, remediation, compliance and risk management initiatives
• Analyse processes and systems to recommend solutions and manage requirements traceability, scope changes, dependencies and risks
• Collaborate with Agile teams through two-week sprints, covering design, prioritisation, testing and implementation
• Assess vulnerabilities, remediation activities, security controls and compliance requirements with cyber security and technical teams
• Coordinate QA, verification and validation, and communicate outcomes to technical and non-technical stakeholders

Required profile

• Demonstrated experience as a Business Analyst or Senior Business Analyst on cyber security, resilience, remediation or compliance initiatives in large ICT environments
• Proven experience in business process modelling, requirements definition and management, stakeholder engagement and business process improvement
• Experience developing process models, user stories, use cases, data flow diagrams and test cases
• Strong stakeholder engagement, communication and influencing skills, including with senior executives
• Agile experience and ability to manage competing priorities and tight deadlines
• Experience in government or regulated environments (enterprise infrastructure, cloud, IAM, SOC, ICT transformation)
• Negative Vetting Level 1 (NV1) security clearance; a Vulnerable People / Working with Children Check and Police check are required

Required skills

• Cyber security frameworks: Protective Security Policy Framework (PSPF), Australian Government Information Security Manual (ISM), Essential Eight, NIST
• Vulnerability management tools: Archer IRM, Rapid7, Tenable, Microsoft Defender, Forescout, Sentinel
• Business analysis: process modelling, user stories, use cases, data flow diagrams, test cases

What we offer

• Hybrid working with team anchor days
• Extensive training and development opportunities
• Discounts and benefits, and a choice of IT equipment
• Team events and a culture of diversity and inclusion