Senior Business Analyst – Cyber Incident Remediation

“OTIC” means smart people doing smart work, together.

We are a wholly owned Australian company based in Melbourne, committed to helping our clients design, secure and modernise technology platforms that unlock value across their business.

Otic Group was founded to give talented technology professionals the opportunity to work alongside some of Australia’s most recognised organisations while collaborating with exceptionally skilled peers in a highly supportive, ambitious and fast-growing environment.

Our expertise spans Project Delivery, Data & Analytics, Cloud Strategy, Application Modernisation and Cybersecurity, with consultants working on complex programs that deliver meaningful and measurable outcomes for our clients.

As demand for our cyber and technology transformation services continues to grow, we are looking for an experienced Senior Business Analyst – Cyber Incident Remediation to join our permanent consulting team.

About the Role

This role sits at the intersection of cyber security, business transformation and technology delivery.

You will play a key role in driving remediation initiatives arising from cyber incidents, security assessments, audits and risk reviews. Working across multiple technology and business teams, you will translate findings into clear business and technical requirements, remediation backlogs, measurable acceptance criteria and successful delivery outcomes.

The scope of work spans enterprise platforms including Salesforce CRM, Marketing Cloud, Tableau, Enterprise Data Platforms, Microsoft 365 and identity and access management solutions. You will work closely with cyber security specialists, architects, platform engineers, application owners, data teams and senior business stakeholders to uplift security controls and strengthen governance practices across the organisation.

This is an ideal opportunity for a Senior Business Analyst who enjoys solving complex problems, challenging assumptions and driving outcomes in large-scale, fast-paced environments.

What You’ll Be Doing

• Translating cyber incident findings, security assessments and audit recommendations into actionable business and technical requirements.
• Leading requirements elicitation workshops across business, cyber and technology teams.
• Defining remediation actions, user stories, traceability artefacts and measurable acceptance criteria.
• Conducting current-state and future-state analysis, process mapping and gap assessments.
• Working across Salesforce, identity and access management, Microsoft 365 governance, data platforms and monitoring capabilities to improve security controls.
• Supporting Agile delivery teams through backlog management, refinement sessions, testing and UAT activities.
• Identifying control gaps and working with stakeholders to drive agreed remediation outcomes.
• Collaborating with platform and engineering teams to implement sustainable solutions aligned to security and governance objectives.

What We’re Looking For

You will bring extensive Business Analysis experience gained across complex enterprise technology environments, along with a strong background delivering cyber security remediation or security uplift initiatives.

We’re particularly interested in professionals who can demonstrate:

• 10+ years of Business Analysis experience delivering large-scale technology transformation programs.
• Proven experience delivering cyber security remediation, security uplift, risk management or control improvement initiatives.
• Strong capability translating incident findings, audit recommendations and security assessments into clear requirements and implementation plans.
• Experience working with Identity & Access Management (IAM), role-based access control (RBAC), privileged access management and least-privilege principles.
• Advanced requirements elicitation, process modelling, gap analysis and acceptance criteria definition skills.
• Experience defining requirements for security logging, monitoring, detection and reporting capabilities.
• Strong understanding of data governance, information protection, privacy obligations and management of sensitive information.
• The ability to engage effectively with cyber security specialists, architects, engineers, data teams and business stakeholders.
• Strong Agile delivery experience, including user stories, backlog development, requirements traceability and test support.
• A proactive, self-starting approach with the confidence to challenge assumptions, identify risks and drive outcomes with minimal direction.

Highly Desirable Experience

Exposure to one or more of the following will be highly regarded:

• Salesforce CRM and/or Marketing Cloud security and access management.
• Microsoft 365 governance and Microsoft Purview.
• SIEM, SOC or enterprise security monitoring environments.
• IAM, PAM, passwordless authentication and passkey implementations.
• Tableau, enterprise data platforms or analytics environments.
• Security incident response programs or regulator/audit-driven remediation initiatives.

Why Join Otic?

At Otic, you’ll work alongside highly capable consultants who are passionate about delivering exceptional outcomes for our clients. You’ll gain exposure to complex enterprise environments, leading technologies and challenging transformation initiatives while being supported by a team that genuinely values collaboration, accountability and continuous learning.

Most importantly, you’ll be joining a business where smart people do smart work, together.

Eligibility Requirements

As a Melbourne-based organisation, we are seeking candidates who are locally based or able to work within the Melbourne market.

Applicants must hold Australian Citizenship, Permanent Residency (PR), or unrestricted permanent Australian work rights.