Senior Cyber Security Business Analyst

📍 Melbourne | ⏳ Initial 15-Week Engagement | 🔒 Critical Infrastructure

Following a recent independent audit, a major critical infrastructure provider is embarking on a pivotal cyber security uplift program. With 14 key risk areas identified across both IT and OT environments, we’re now looking for an exceptional Senior Cyber Security Business Analyst to help shape and define the strategy for remediation.

This is not a standard BA role. We’re seeking a well-rounded, professional, and business-savvy consultant who combines a strong Business Analysis toolkit with proven Cyber Security experience, commercial acumen, and the ability to operate confidently with senior executives and board members.

What you’ll be doing

• Partner with the CISO’s team to define and structure a remediation program addressing critical IT & OT risks.
• Engage with Domain Architects, Solution Architects, business stakeholders, and potentially board-level leaders.
• Build robust business cases, including costings, resource projections, NPV models, and risk impact assessments.
• Help shape a pragmatic yet forward-thinking plan that balances compliance needs with the organisation’s ambition to be industry-leading in Cyber.
• Contribute to prioritisation of the 14 identified risk areas, with focus on the first 4 high-impact initiatives within the next 12 months.

What we’re looking for

• Non-Negotiable: Demonstrated Cyber Security project experience, particularly across IT & OT risk environments.
• Strong background in Business Analysis, with a track record in business case development and financial modelling.
• Exceptional stakeholder management skills – able to translate complex cyber concepts into business language, influence decisions, and build consensus.
• Commercially astute and comfortable balancing risk, cost, and long-term value.
• A consultant’s mindset – articulate, lateral thinker, outcome-focused, and able to challenge constructively.

Why this role matters

This organisation provides essential services to the state, and the identified risks are at the highest severity level. This is a unique opportunity to work at the heart of a program with both government and regulatory visibility, helping set the tone for how critical infrastructure manages cyber resilience in the years to come.

👉 If you’re a Cyber-savvy BA who can blend analysis with strategy, stakeholder engagement, and commercial insight, we’d like to hear from you.

Acknowledgement of Country

Salt respectfully acknowledges the Traditional Owners of the lands across Australia as the continuing custodians of country and culture. We recognise the enduring connection that Aboriginal and Torres Strait Islander peoples have to the lands, waters, and skies.

We pay our respects to all First Nations Australians and their Elders past and present.

We’re proud to have won the Best Mid-Sized Recruitment Company to Work For at the 2023 TIARA Recruitment Awards, and to have been finalists, for the second year in a row, in the Client Service and Recruitment Leader of the Year categories! At Salt, our mission is Creating Futures by putting our clients, candidates, partners, and team members at the heart of everything we do. We extend our sincere appreciation to everyone who has contributed to our continued success.

Salt acknowledges the Traditional Owners of the lands across Australia as the continuing custodians of country and culture. We pay our respects to all First Nations Australians and their Elders past and present.