Support and Information Security Analyst

About Us

At Honeysuckle Health, we're on a mission to help people lead healthier lives by connecting them with effective, affordable and personalised care. We do this by understanding their current and future health needs, helping them to prevent and manage disease risk and make better treatment decisions. We aim to play a leading role in Australia's healthcare systems by engaging customers, medical practitioners, payers and allied health providers in the provision of innovative, evidence-based healthcare services and programs.

We're a wholly owned member of the nib Group and are merging with nib's digital health company, Midnight Health, to form an integrated health services organisation offering a broad suite of health programs and services including an online telehealth and pharmacy service. Through digital and telephonic health programs, data-driven insights and strong industry partnerships, we're building a more connected and value-driven healthcare system for all Australians.

About the Role

We are looking for a passionate Support and Information Security Analyst, who will support the management of information security risk by engaging with business and providing input into the evaluation and treatment of identified risks. You will ensure appropriate testing and ongoing adherence of internal information security controls is undertaken, and make recommendations for addressing gaps or developing remediation plans.

The Support and Information Security Analyst is responsible for analysing and ensuring that our digital information systems are working efficiently as well as supporting both internal and external stakeholders with issues relating to their use of these systems. You will work collaboratively with both internal and external parties to develop new processes for support and maintenance as well as be responsible for the management and maintenance of our base platforms and public cloud infrastructure.

Key Responsibilities

• Internal and External Support:

• Support internal and external users to access and work in key systems.

• Respond to requests for support via our Service Desk and the technical support channel in our company communication platform.
• Leverage your technical skills to design and deliver high quality documentation for our processes, procedures and knowledge base articles.

• Develop, maintain and deliver best in class user training across key systems and procedures.

• User and Device Administration:

• Provision and manage user access to our systems as required by their role, adhering to the principle of least privilege.

• Prepare equipment (laptop, headset, etc) for new staff members.

• Ensure user access is terminated upon staff departure, and devices are returned and wiped in preparation for reassignment.

• SaaS infrastructure and endpoint administration:

• Management, maintenance and administration of software as a service and line of business applications.

• Monitoring and reporting on our issues across all our technology stack.

• Remote administration and maintenance of our endpoints.

• Security Operations:

• Work with the business to operate our ISO 27001 compliant Information Security Management System.

• Support the Information Security Manager with internal and external ISO 27001 audit activities.
• Develop and maintain policies and procedures that align with the internal security requirements for all information systems.
• Design and read KPIs on information security control effectiveness.
• Monitor and report compliance with our Information Security framework.
• Contribute to the design, maintenance and integrity of our database architecture and systems including documentation, guidelines.
• Security testing of information systems as required to confirm that security baselines have been met.
• Reviewing the design of systems and and components to ensure proper working, monitoring and performance of network operations.
• Perform user access reviews on all systems to ensure appropriate access is maintained.
• Compose and maintain user access review procedures for all systems.

• Perform 3rd party supplier due diligence assessments and identify Information Security risks in our supply chain

• Business Continuity:

• Development, execution and maintenance of IT disaster recovery plans.

• Enable the secure operation of the technical Business Continuity processes (backups, recovery procedures), implementation of relevant security controls and the operational management of system security and disaster recovery.

About You

Required Knowledge/Experience

• Ability to communicate effectively with stakeholders at all levels of an organisation
• Remote administration of endpoint devices (Windows 11 / MacOS / Intune / ConnectWise)
• Administration and support of Information Security applications (CrowdStrike / Netskope)
• Administration of our SaaS solutions (Salesforce / Snowflake / Microsoft 365 / SharePoint / Jira / Confluence)
• User administration and SSO Configuration (Okta / Entra AD)
• Have experience in delivering high quality technical support
• Exposure to business continuity planning and disaster recovery (Backup / Testing / Chaos Days)

Benefits

• Hybrid work model within our Fortitude Valley Office
• Collaborative team environment
• nib Private Health & Travel Insurance discounts
• Paid parental and volunteer leave
• Access to Fitness Passport
• Salary packaging and novated leasing
• Work in a purpose-lead organisation that values the health & wellbeing of its employees.
• Access to Employee Assistance Program (EAP)

Visit and to learn more about what we do.

Ready to make a meaningful difference? Apply now via Seek

Please ensure you provide a one-page cover letter addressing your suitability to the 'About You' section of the ad.