Cybersecurity & Governance Analyst
Miga, a medical indemnity insurer in Adelaide, is hiring a Cybersecurity & Governance Analyst to build and maintain its information security governance framework: writing policies, monitoring risks and incidents, managing audits and awareness training, and board reporting, reporting to the IT Manager. Key frameworks: COBIT, NIST, ITIL, APRA CPS 234.
- Compensation
- Not disclosed
- Location
- Adelaide SA
- Work setup
- Hybrid
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 3+ years
- Category
- Security
- Posted
Skills
Must have
- Minimum 3-5 years' experience in an information security, governance, risk or compliance role
- Tertiary qualification in Information Technology, Cybersecurity or a related discipline
- ITIL certification
- COBIT, NIST or equivalent governance framework certification or experience
- CompTIA Security+ or similar industry-recognised cybersecurity certification
- Experience in cybersecurity, IT governance, information security, risk management or compliance
- Strong knowledge of information security governance frameworks such as COBIT, NIST or similar
- Experience developing and implementing security policies, standards and procedures
- Knowledge of cloud environments and modern security practices
- Experience conducting security risk assessments and developing risk mitigation strategies
- Strong understanding of security controls, monitoring and incident response processes
- Experience preparing governance, compliance and operational reports
- Excellent communication and stakeholder management skills
- Strong analytical and problem-solving capabilities
- Ability to influence and build security awareness across all levels of an organisation
- A collaborative approach and commitment to continuous improvement
Nice to have
- Experience within financial services, insurance or other highly regulated industries
- Knowledge of APRA Prudential Standards including CPS 234, CPG 234 and CPS 235
- Experience working with external auditors and regulatory compliance frameworks
- Experience implementing data governance models and information management practices
- Exposure to security technologies and monitoring platforms including firewalls, endpoint protection and cloud-based security solutions
Full description
Elevate your career with Miga
For more than 125 years, Miga has supported healthcare professionals across Australia with trusted medical indemnity insurance and expert guidance to help them practise with confidence.
The Opportunity
We are seeking an experienced and proactive Cybersecurity & Governance Analyst to join our Corporate Services team based in Adelaide.
This is an exciting opportunity for an information security professional who is passionate about cyber governance, risk management, compliance, and building a strong security culture within a purpose-driven organisation.
Reporting to the IT Manager, you will play a key role in enhancing Miga's information security governance framework, strengthening cyber resilience, and ensuring compliance with organisational and regulatory requirements. You will work closely with internal stakeholders and external partners to develop security policies, manage security awareness initiatives, oversee governance and risk activities, and support the ongoing protection of Miga's systems, data and technology environment.
Working across the business, you will contribute to strategic security initiatives while helping ensure our information assets remain secure, compliant and well-governed.
Key Responsibilities include but are not limited to:
- Develop, implement and maintain Miga's Information Security Governance Framework
- Develop and review information security policies, procedures and standards
- Monitor security risks, vulnerabilities and compliance obligations across the organisation
- Participate in security audits and coordinate responses to audit findings and recommendations
- Support the design, implementation, testing and monitoring of security controls
- Manage information security incident response plans and testing activities
- Conduct third-party security and risk assessments with vendors and partners
- Deliver and coordinate the organisation's security awareness and training program
- Monitor networks and cloud environments to identify and respond to security incidents
- Investigate security alerts and recommend remediation actions
- Prepare operational, governance and board reporting relating to cybersecurity and risk
- Collaborate with stakeholders to strengthen data governance, ownership and security awareness
- Develop security risk assessments, risk management strategies and business cases for security initiatives
- Work with external cybersecurity partners to continuously improve Miga's security posture.