Senior Cyber Security Business Analyst – PAM / CyberArk

“OTIC” means smart people doing smart work, together.

We are a wholly owned Australian company based in Melbourne, committed to helping our clients design, secure and modernise technology environments that create meaningful business value.

Otic Group was established to provide exceptional technology professionals with the opportunity to work alongside some of Australia’s most recognised organisations while collaborating with highly skilled peers in a supportive, dynamic and fast-growing consulting environment.

Our capabilities span Project Delivery, Data & Analytics, Cloud Strategy, Application Modernisation and Cybersecurity. We pride ourselves on delivering high-impact outcomes on some of Australia’s most complex technology and security transformation programs.

As demand for our cyber security consulting services continues to grow, we are seeking an experienced Senior Cyber Security Business Analyst – PAM / CyberArk to join our permanent consulting team.

About the Role

This opportunity will see you embedded within a major Privileged Access Management (PAM) uplift program, working across cyber security, identity, architecture, engineering and business teams to strengthen privileged-access controls and improve enterprise security outcomes.

You will play a pivotal role in analysing existing privileged-access processes, facilitating workshops with key stakeholders, documenting current-state environments, defining future-state operating models and translating complex CyberArk and security requirements into actionable delivery outcomes.

Working closely with architects, CyberArk specialists, engineers and business stakeholders, you will help drive the implementation and optimisation of PAM capabilities while ensuring requirements are clearly defined, understood and successfully delivered.

This role is ideally suited to a senior Business Analyst with strong CyberArk and Identity & Access Management expertise who is comfortable operating in complex enterprise environments and bridging the gap between technical security teams and business stakeholders.

What You’ll Be Doing

• Working with security, identity, architecture and engineering teams to support a large-scale Privileged Access Management transformation.
• Documenting existing privileged-access processes, workflows, controls and operating models.
• Facilitating workshops and requirements-gathering sessions with technical SMEs, administrators, end users and business stakeholders.
• Defining future-state privileged-access processes, detailed use cases and functional requirements.
• Translating architecture decisions, proof-of-concept outcomes and technical security requirements into implementable business and delivery requirements.
• Developing user stories, requirements documentation, process maps, traceability artefacts and acceptance criteria.
• Identifying opportunities to strengthen privileged-account lifecycle management, governance and security controls.
• Supporting delivery teams throughout implementation, testing, user acceptance and deployment activities.
• Collaborating with CyberArk specialists to uplift capabilities across the PAM ecosystem.
• Contributing to security uplift initiatives aligned to organisational cyber security objectives and regulatory obligations.

What We’re Looking For

We’re seeking a senior Business Analyst with a proven track record delivering cyber security, Identity & Access Management or Privileged Access Management initiatives within large enterprise environments.

To be successful you’ll demonstrate:

• Extensive Business Analysis experience delivering complex cyber security, IAM or PAM transformation initiatives.
• Strong CyberArk and Privileged Access Management knowledge, with the ability to translate highly technical concepts into business and functional requirements.
• Experience analysing privileged-user and administrator access models, associated workflows and governance controls.
• Strong current-state and future-state process analysis capabilities including process modelling, gap analysis and use-case development.
• Proven workshop facilitation and requirements-elicitation skills across technical and non-technical stakeholder groups.
• Experience working across architecture, engineering, cyber security and business teams to drive alignment and delivery outcomes.
• Strong understanding of Identity & Access Management principles, controls and governance models.
• Excellent stakeholder management, communication and documentation skills.
• The ability to challenge assumptions, identify risks and drive practical outcomes in complex environments.

Highly Desirable Technical Experience

Exposure to the CyberArk ecosystem will be highly regarded, including:

• CyberArk Privilege Cloud
• Privileged Session Manager (PSM)
• PSM for SSH
• Secure Infrastructure Access (SIA)
• HTML5 Gateway
• PSM Published Applications
• CyberArk Safes, Platforms and Policy Models
• Privileged-account operating models and governance frameworks
• Workload credentials management
• API key and machine identity management

Cyber Security Knowledge

The ideal candidate will also bring:

• Strong understanding of privileged-account security risks, threats and mitigating controls.
• Experience working within mature enterprise cyber security environments.
• Knowledge of the Australian Cyber Security Centre (ACSC) Essential Eight, particularly controls relating to privileged access management and administrative privilege restriction.
• Experience supporting cyber security uplift, governance or compliance-driven programs.
• Familiarity with security best practices relating to least privilege, segregation of duties, privileged-account lifecycle management and access governance.

Why Join Otic?

At Otic, you’ll work alongside highly capable consultants who are passionate about solving complex technology and security challenges for Australia’s leading organisations.

You’ll gain exposure to enterprise-scale cyber security programs, leading technologies and highly talented peers while enjoying the benefits of a collaborative and employee-focused consulting business that values expertise, accountability and continuous growth.

Most importantly, you’ll join a team where smart people do smart work, together.

Eligibility Requirements

As a Melbourne-based organisation, we are seeking candidates who are locally based or able to work within the Melbourne market.

Applicants must hold Australian Citizenship, Permanent Residency (PR), or unrestricted permanent Australian work rights.