About AARNetAustralia's Academic and Research Network (AARNet) was established in 1989 and is widely regarded as the founder of the Internet in Australia and renowned as the architect, builder and operator of world-class network infrastructure for research and education.We are Australia's National Research and Education Network (NREN). We connect over one million users—researchers, faculty, staff and students—at institutions across Australia, supporting education and research across a diverse range disciplines including high energy physics, climate science, genomics, radio astronomy and the arts.Nationally, AARNet interconnects Australian universities, the CSIRO, and other organisations who have a research and education mission, or with whom the education and research sector interacts. These include hospitals, vocational training providers, schools and museums. Internationally, AARNet interconnects the Australian Research and Education (R & E) community to the world – and continuously develops new capabilities and partnerships to facilitate seamless data access and transfer.AARNet also offers a suite of supporting applications to our customers. These include network and collaboration services such as CloudStor and Zoom, that enable innovation in the delivery of research and education.We are an organisation of innovators, doers, and courageous thinkers. We are not constrained by traditional products and solutions and we constantly strive to build the solutions that our customers will need tomorrow – today. If you have the imagination, foresight and drive to build the future why not come and join us?The RoleThe Business Analyst role will play a crucial role in helping AARNet's Security Operations Centre (SOC) service achieve ISO 27001 certification by aligning our security operations processes with the ISO27001 standard's requirements and ensuring effective management of those services.This is a maximum term role of 12 months.ResponsibilitiesISMS Design and Implementation for the SOC:Developing SOC-Specific Policies and Procedures: Assist in developing or revising information security policies and procedures that specifically address SOC operations and align with ISO 27001 standards. This may include incident response procedures, threat intelligence sharing protocols, and change management processes for SOC systems.Documentation:Developing SOC Documentation: Assist in creating and maintaining documentation required for ISO 27001 certification specific to the SOC, such as the SOC scope statement, risk treatment plan for SOC-related risks, and incident response procedures tailored to the SOC's workflow.Audit Preparation and Support for SOC Operations:Internal Audit of SOC: Support remediation activities relating to documentation and process focusing on the SOC's adherence to ISO 27001 requirements.Certification Audit Support: Support remediation activities relating to documentation and process focusing on the SOC's adherence to ISO 27001 requirements.Continual Improvement of SOC Security:Monitoring and Review of SOC: Continuously monitor the effectiveness of security controls in the SOC environment, collect feedback from SOC personnel, and recommend improvements to ensure ongoing compliance with ISO 27001 and enhance the SOC's security posture.Expertise, experience & qualificationsDemonstrable experience as a Business Analyst in a medium to large organisationHave worked on previous ISO27001 programs of work where you have created and maintained ISO 27001 documentation (nice to have)Have experience in developing policies and procedures for a large program of workWorked with a diverse set of stakeholders to interview and capture relevant informationExperience in Cyber security related services (nice to have)Demonstrated success delivering projects using JiraExperience in roles facilitating workshops and developing deliverables from the workshopsCertification in one or more Business Analysis methodologies or equivalent experience including Agile delivery methodologies or equivalent experienceImportant skillsStrong skills in facilitating workshops with stakeholders of different levels of seniority or backgroundsPromotes collaboration between diverse groups inside and outside the home team by removing roadblocks and fostering communicationTakes initiative to find solutions and owns the resolution of issuesAble to thrive in small start-up like organisations that provide lots of autonomy and not tightly defined structured processesExcellent written and verbal communication skills and ability to work collaboratively (one team mentality)Conditions of employmentAARNet is committed to diversity and providing equal opportunity to all. We're a great place to work if you want to make a difference.AARNet provides competitive remuneration and a host of other benefits including:• 17% superannuation;• Flexible work options;• Options to purchase additional Annual Leave;• 2 days paid Women's Wellness Leave per month;• 24 weeks paid Parental Leave – Primary Carer;• Welcome back to AARNet superannuation payment – on unpaid Parental Leave for Primary Carer;• 4 weeks paid Birth Trauma Leave;• 24 weeks paid - Adoption Leave;• 16 weeks paid Parental Leave – Secondary Carer;• 5 days paid – First Nations Cultural Leave;• 2 days paid Family Wedding Leave;• 24 weeks paid – Foster Carer Leave;• 5 days paid – Fertility Leave;• 8 weeks paid – Gender Affirmation Leave;• Strong Equal Opportunity focus;• Sector leader in Social Responsibility and Ethics; and• A culture and company structure that allows your career to grow with access to leading edge technologies
