Cybersecurity & Governance Analyst in Sydney

Medical Insurance Group Australia – Sydney CBD NSW

For more than 125 years, Miga has supported healthcare professionals across Australia with trusted medical indemnity insurance and expert guidance to help them practise with confidence.

Elevate your career with Miga

For more than 125 years, Miga has supported healthcare professionals across Australia with trusted medical indemnity insurance and expert guidance to help them practise with confidence.

The Opportunity

We are seeking an experienced and proactive Cybersecurity & Governance Analyst to join our Corporate Services team based in either Sydney or Adelaide.

This is an exciting opportunity for an information security professional who is passionate about cyber governance, risk management, compliance, and building a strong security culture within a purpose-driven organisation.

Reporting to the IT Manager, you will play a key role in enhancing Miga's information security governance framework, strengthening cyber resilience, and ensuring compliance with organisational and regulatory requirements.

You will work closely with internal stakeholders and external partners to develop security policies, manage security awareness initiatives, oversee governance and risk activities, and support the ongoing protection of Miga's systems, data and technology environment.

Working across the business, you will contribute to strategic security initiatives while helping ensure our information assets remain secure, compliant and well-governed.

Key Responsibilities include but are not limited to

• Develop, implement and maintain Miga's Information Security Governance Framework
• Develop and review information security policies, procedures and standards
• Monitor security risks, vulnerabilities and compliance obligations across the organisation
• Participate in security audits and coordinate responses to audit findings and recommendations
• Support the design, implementation, testing and monitoring of security controls
• Manage information security incident response plans and testing activities
• Conduct third-party security and risk assessments with vendors and partners
• Deliver and coordinate the organisation's security awareness and training program
• Monitor networks and cloud environments to identify and respond to security incidents
• Investigate security alerts and recommend remediation actions
• Prepare operational, governance and board reporting relating to cybersecurity and risk
• Collaborate with stakeholders to strengthen data governance, ownership and security awareness
• Develop security risk assessments, risk management strategies and business cases for security initiatives
• Work with external cybersecurity partners to continuously improve Miga's security posture.
• What we’re looking for

Success in this role comes from strong technical knowledge, sound judgement, excellent stakeholder engagement skills and the ability to balance cybersecurity, governance and business needs.

We're seeking someone who brings

• Experience in cybersecurity, IT governance, information security, risk management or compliance
• Strong knowledge of information security governance frameworks such as COBIT, NIST or similar
• Experience developing and implementing security policies, standards and procedures
• Knowledge of cloud environments and modern security practices
• Experience conducting security risk assessments and developing risk mitigation strategies
• Strong understanding of security controls, monitoring and incident response processes
• Experience preparing governance, compliance and operational reports
• Excellent communication and stakeholder management skills
• Strong analytical and problem-solving capabilities
• Ability to influence and build security awareness across all levels of an organisation
• A collaborative approach and commitment to continuous improvement.

Desirable

• Experience within financial services, insurance or other highly regulated industries
• Knowledge of APRA Prudential Standards including CPS 234, CPG 234 and CPS 235
• Experience working with external auditors and regulatory compliance frameworks
• Experience implementing data governance models and information management practices
• Exposure to security technologies and monitoring platforms including firewalls, endpoint protection and cloud-based security solutions.

Qualifications

• Tertiary qualification in Information Technology, Cybersecurity or a related discipline
• ITIL certification
• COBIT, NIST or equivalent governance framework certification or experience
• Comp TIA Security+ or similar industry-recognised cybersecurity certification
• Minimum 3-5 years' experience in an information security, governance, risk or compliance role
• The benefit to you

When you join Miga, you become part of a supportive, values‑driven organisation that invests in your wellbeing, growth, and long‑term success.

We offer a range of benefits designed to help you thrive both professionally and personally, including:

• Competitive remuneration, plus an additional 1.5% super contribution
• Salary continuance insurance (income protection)
• Free travel insurance
• Wellness leave and other wellbeing initiatives
• Access to a confidential Employee Assistance Program (EAP)
• Paid parental leave – 12 weeks for primary caregivers and 3 weeks for secondary caregivers
• Professional development opportunities to support long‑term career growth
• Flexible work arrangements to help you balance work and life

Miga is an Equal Opportunity Employer committed to fostering a diverse, inclusive and safe workplace.

We welcome applicants from all backgrounds and experiences and value the perspectives they bring to our organisation.

#J-18808-Ljbffr