Senior Business Analyst - Cyber Security

Avant | Group Solutions | Permanent Full-time | Sydney CBD

Shape the future of cyber security at Australia's leading doctor-owned organisation

Avant is investing heavily in cyber security, with multiple funded initiatives underway and strong backing from leadership. We're looking for an experienced Senior Business Analyst to play a central role in delivering security projects and uplift programs that protect Avant and the doctors we support.

This is a high-impact, high-visibility role for someone who can work independently, build trust across business and technical teams, and translate complex security and regulatory requirements into clear, actionable outcomes.

About the Role

Reporting to the Senior Manager, Security Engineering, you'll lead business analysis across Identity and Access Management (IAM), Network Security, and broader cyber uplift initiatives. You'll work closely with stakeholders across every business unit at Avant, as well as external vendors, to define and deliver requirements that reduce cyber risk and meet business objectives.

You'll bring strong knowledge of security frameworks and regulatory obligations — and the communication skills to make them meaningful to both executives and delivery teams.

What You'll Do

Own end-to-end delivery of business analysis activities across security projects, driving outcomes with minimal direction

Produce audit-ready artefacts — BRDs, functional specs, user stories, traceability matrices and process diagrams — aligned to BABOK practices

Translate regulatory obligations (CPS 234, APP) and technical controls into clear business requirements with defined acceptance criteria

Facilitate stakeholder workshops and drive consensus on requirement priorities using a risk-based approach

Review security solution designs against Zero Trust, least privilege, and segmentation principles

Analyse security operations and controls, and design target-state models aligned to NIST CSF 2.0, ISO 27001 and APRA CPS 234

Support vulnerability and patch management reporting, building Tableau dashboards to track SLA performance

Contribute to IAM programme delivery, identity lifecycle analysis, and access certification workflows

Engage directly with executives on strategic decisions, pre-sales, scoping, and business case development

What You'll Bring

Tertiary qualification in Cyber Security, Business Systems/Management, IT, Computer Science, or related field

Security certification — CISSP, CISM, CISA, or CRISC

8+ years' overall experience, including 5+ years as a Security Business Analyst, ideally within APRA-regulated entities

Hands-on experience with CPS 234, CPS 230, and frameworks such as ISO 27001, NIST, and ISO 42001

A track record of influencing senior stakeholders and executives without formal authority

Experience delivering cyber uplift projects in IAM, Vulnerability Management, or Network Security

Strong analytical skills — root cause analysis, gap analysis, impact assessment — plus proficiency in Tableau

Solid grounding in BABOK, Agile BA practices, and structured requirements documentation

Excellent verbal and written communication skills

Nice to have: experience working within Agile delivery frameworks.

About Avant

Avant is Australia's leading medical defence organisation, protecting and supporting medical practitioners throughout their careers. With a proud history of advocating for better healthcare, Avant combines deep claims expertise with research-driven thought leadership to shape the future of safe, equitable, and sustainable healthcare in Australia.

Why Avant?

Avant supports doctors so they can focus on caring for Australia's diverse communities. We're proud of our inclusive culture and welcome applicants from all backgrounds, including Aboriginal and Torres Strait Islander peoples, people from culturally diverse communities, LGBTQIA+ individuals, people with disabilities, and those with caring responsibilities. We're committed to making reasonable adjustments throughout the recruitment process — just let us know what you need.

Avant supports doctors so they can serve Australia's diverse communities. Having diversity in our workforce brings valuable perspectives and strengthens our ability to support healthcare professionals.

We therefore welcome applications from people of all backgrounds, including Aboriginal and Torres Strait Islander peoples, people from culturally diverse communities, LGBTQIA+ individuals, people with disabilities, and those with caring responsibilities.

Our inclusive workplace is somewhere everyone can succeed.

Ready to join us? If you're passionate about supporting Australia's healthcare professionals, we'd love to hear from you. If you require any adjustments during the recruitment process, please don't hesitate to contact us at careers@avant.org.au