Senior Technical Business Analyst - Essential Eight

About the role

An urgent, contract-to-June-2027 opportunity for an experienced Technical Business Analyst to support a major cybersecurity maturity and compliance uplift in a large, complex organisation. The role works across an Essential Eight Maturity Level 2 (ML2) programme, building on an existing assessment to confirm the current-state baseline, identify control gaps and turn them into a prioritised uplift backlog aimed at delivery by June 2027. It is remote/hybrid with access to a local office.

Key responsibilities

• Confirm the current-state Essential Eight maturity baseline and identify gaps to ML2
• Translate control gaps into prioritised requirements and uplift activities
• Develop business, functional and non-functional requirements
• Produce user stories, acceptance criteria and process maps
• Facilitate workshops with business, security and technology stakeholders
• Work alongside architects, engineers and external partners on solution design
• Maintain traceability from gaps through delivery and reassessment evidence
• Support business case development, planning and prioritisation
• Produce reporting for senior leadership and steering committees
• Work in a delivery environment combining Agile and Waterfall approaches

Required profile

• Strong technical business analysis experience in a large enterprise environment
• Essential Eight / ML2 experience or strong practical exposure is essential
• Experience establishing current-state baselines and conducting gap analysis
• Experience working across technical and business stakeholder groups
• Ability to work independently, quickly understand an existing programme and drive outcomes
• Telecommunications, critical infrastructure or similarly regulated industry experience is advantageous

Required skills

• Requirements gathering, stakeholder workshop and documentation skills
• Understanding of the technologies and controls behind Essential Eight
• Exposure to SOCI, ISM or comparable security/compliance frameworks is highly regarded

What we offer

• Contract through to June 2027, with potential extension
• Remote/hybrid flexibility with access to a local office
• Contribution to a significant enterprise security maturity uplift in a highly visible programme