Business Analyst

Business Analysts seek to understanding business processes and determining business requirements for systems. Business Analysts (Security) identify opportunities to improve business models, operations, services and processes. They collaborate with stakeholders across the agency to clarify problems, explore opportunities, and support informed decision-making. Senior Business Analysts (Security) lead complex analysis, and requirements work across workstreams to support delivery decisions. They manage competing stakeholder needs, establish analysis approaches, and ensure requirements and traceability are effectively managed. They contribute to governance, risk and quality activities for programs. Key duties and responsibilities ensure business, system requirements, policy compliance and user needs are clearly defined and documented with clear, testable acceptance criteria. extensive experience in the analysis of complex business problems in large scale, transformational and compliance program of work within a government context autonomously under guidance of the program manager to engage with a broader range of stakeholders to understand the operating and delivery context, eliciting complex requirements, nuance and areas for operational improvement. have a practical understanding and experience of cyber security related operations and government cyber security policy including protective security policy framework, information security manual and essential 8 strategies. collaborate with others to clearly define and clarify business needs to create an action plan, solution report or business case for consideration of senior staff liaise with a range of stakeholder to understand, elicit and analyse their core requirements and concerns to meet their needs and the agency's cyber security operational and compliance objectives implement business analysis approaches that may include specifying team roles, deliverables, analysis techniques or stakeholder communication assess the current state of the cyber operations to identify and recommend improvements for consideration by senior staff and provide strong analysis, verification and validation on the recommended improvements conduct stakeholder analysis to increase engagement with a range of key stakeholders to effectively understand cross business functions identify operational processes, workflows and use cases for automation to improve operational productivity and reduce investment of labour in low value, low complexity tasks. develop process and workflow diagrams and apply lean principles to reduce unnecessary steps and effort to outcome. facilitate and lead communication across business units with a range of key stakeholders and represent the agency at a range internal and external forums develop requirements and communication through scope, traceability and maintenance lead and manage the development of the requirements traceability matrix, including testing and quality checking activities prepare and implement change management plans and/or communication plans prepare, perform and coordinate elicitation requirement techniques such as brainstorming, workshops, prototyping, observation or interviews, and confirm or report on results prepare, review and contribute to clear business and stakeholder requirement documentation including prioritising, organising and verifying the requirements lead the examination and organisation of requirements to record and identify dependencies, relationships and logical sequences define the process that will be used to approve requirements for implementation and manage change to the solutions or requirements scope review and consider project documentation and agency processes to determine deliverables conduct risk analysis and problem tracking to mitigate potential issues prepare and implement requirements management plan, including testing and quality assurance strategies and activities implement performance metrics and reporting tools to effectively measure work, outputs, and objectives specify and model requirements through analysis using textual statements, matrices, diagrams, and formal models identify business analyst deliverables, the scope of work for the business analysis activities, resource allocation and estimates for business analyst work promote the reason for a business change or capability that is required for the agency and/or contribute to the capability gap analysis assess and validate solutions to determine how closely the solution meets the agency’s objectives develop clear and defined work plans and timeframes for self and team in the context of business priorities. Mentor staff including coaching and guidance to build knowledge and capability Knowledge / Qualifications Cyber security knowledge and experience Protective Security Policy Framework (PSPF) Information Security Manual (ISM) Essential 8 Strategies National Institute of Standards and Technology (NIST) Business modelling BSMO – Level 4 Business process improvement BPRE – Level 5 Business situation analysis BUSA – Level 4 Feasibility assessment FEAS – Level 3 Requirements definition and management REQM – Level 4 Stakeholder relationship management RLMT – Level 5 Criteria The buyer has specified that each candidate must provide a one page pitch to address all criteria specified. This is equal to 5000 characters. Essential criteria 1. Demonstrated experience in cyber resilience, security remediation or compliance initiatives within large and complex ICT environments, preferably within Australian Government or other regulated environments. 2. Demonstrated and proven experience performing the duties and responsibilities relevant to the role being applied for, including the required technical skills, technologies, frameworks and methodologies identified in the RFQ 3. Demonstrated experience applying cyber security frameworks, policies and standards, including the Protective Security Policy Framework (PSPF), Information Security Manual (ISM), Essential Eight and other relevant security and risk management frameworks. 4. Demonstrated ability to engage, influence and collaborate with a broad range of stakeholders, including senior executives, technical specialists, business representatives and external providers. 5. Must hold and maintain a current Negative Vetting Level 1 (NV1) Security Clearance. Desirable criteria 1. Demonstrated experience delivering cyber security, infrastructure, ICT transformation or uplift activities within government agencies or complex ICT environments 2. Experience working within large-scale enterprise environments involving cloud platforms, identity and access management, security operations, infrastructure, applications and data services 3. Demonstrated ability to deliver outcomes within tight timeframes while managing competing priorities, dependencies and stakeholder expectations. 4. Demonstrated ability to communicate complex technical and cyber security concepts to both technical and non-technical audiences and contribute to capability uplift through mentoring, collaboration and knowledge transfer activities. Opportunity summary Sellers can submit Up to 2 candidates Number of sellers invited More than 10 Number of candidates submitted Fewer than 10 RFQ closing time 02 Weeks 01 Days 12 Hours Send us feedback About Accessibility Privacy Terms of use Disclaimer and copyright An initiative of the Digital Transformation Agency The Australian Government acknowledges the Traditional Owners of Country throughout Australia and acknowledges their continuing connection to land, waters and community. We pay our respects to the people, the cultures and the Elders past and present. © Commonwealth of Australia