We are seeking an experienced Cybersecurity Business Analyst with deep expertise in Governance, Risk, and Compliance (GRC) to join our Fed Gov's Cyber Program for a fast-paced, 3-month engagement.

You will bridge the gap between complex technical security requirements and business objectives. Be instrumental in analysing processes, identifying risks, and ensuring our program aligns with federal compliance frameworks and institutional risk appetites.

An active Negative Vetting Level 1 clearance is mandatory for this role. Applications without this cannot be considered due to the urgency of the engagement.

Key Responsibilities

• Lead workshops and engage with diverse stakeholders to elicit, analyse, and document business and technical requirements for the Cyber Program.
• Evaluate current state processes against cybersecurity frameworks (e.g., Essential Eight, ISM, PSPF) and identify compliance gaps.
• Conduct risk assessments, threat modeling support, and business impact analyses to inform project priorities.
• Develop high-quality business cases, process maps, user stories, and traceability matrices.
• Translate complex cyber concepts into clear, actionable insights for non-technical business leaders and vice versa.

What We Are Looking For

• Proven track record as a Business Analyst specifically within Cybersecurity or GRC programs.
• Strong familiarity with Australian Government security frameworks (ISM, PSPF, Essential Eight) and/or international standards (ISO 27001, NIST).
• Exceptional written and verbal communication skills, with a knack for managing stakeholders in a complex, environment.
• Ability to hit the ground running, digest complex environments quickly, and deliver high-quality outputs within a tight 3-month timeframe.