Technical Cybersecurity Assurance Analyst

Let's talk about who we are

The nib Group has a mission and vision of people enjoying better health. Through our success, we aspire to more prosperous and sustainable communities, not only the creation of enterprise value. nib is a trusted health partner, helping members and travellers make more informed healthcare decisions, transact with healthcare systems and generally live healthier lives.

We're looking for people who share this passion and want to be a part of a team that has the appetite and ambition to be extraordinary. Extraordinary comes in different perspectives and experiences. We're committed to an environment where everyone has the autonomy and freedom to be their authentic selves, every day.

Let's talk about Diversity, Equity and Inclusion

Let's talk about this role

Reporting to the IT Threat Management Lead, the Technical Cybersecurity Assurance Analyst is responsible for the design, development, implementation, and maintenance of technical capabilities that enable the Cybersecurity and IT Risk & Governance teams in programmatic and manual assurance assessments across nib Group.

Other responsibilities include:
- Report on facets of cybersecurity in varying degrees of detail from deeply technical and detailed to short, summarised and an elevated levelhigh level for non-technical audiences- Support existing cybersecurity programs such as penetration testing and cybersecurity risk identification and lifecycle management- Ensure nib Group's IT footprint is supported by cyber assurance capabilities, driving strategic decisions for both immediate Cybersecurity teams as well as varying levels of the reporting chain up to and including the CIO- Support existing operational requirements and uplift of assurance capability across the Group- Work collaboratively with IT Risk to track and prioritise response and remediation efforts across the Group

For more information about tech at nib, please take check out our tech careers page:
Let's talk about you

With relevant degree qualification in a related discipline and/or equivalent industry experience, other experience and skills that will help set you up for success include:
- Strong grasp of current and emerging technologies and related cybersecurity risk- Strong technical understanding of technology risks and correlating those back to enterprise risk management- Working understanding or knowledge of GDPR- Working understanding or knowledge of information security best practice standards and guidelines e.g. ISO 27001, NIST, ASD Essential 8, etc.- Advanced analytical and problem solving skills- Ability to work with various stakeholders to develop, implement, review and mature security policies and controls- Information security industry certifications from sources such as ISC2, SANS, GIAC, OSP etc, would be highly regarded- Experience in pragmatic operational assessment and management of cyber threats is desirable- Working understanding and knowledge of PCI DSS (Payment Card Industry / Data Security Standard) is desirable- Development and automation experience and cloud-first CICD pattern awareness is desirable

Let's talk about working at nib

Our hybrid working approach means our employees work outside of the office for the majority of the time. Our hubs offer workspaces to connect and collaborate for events, meetings, or activities. To help our employees embrace working outside of the office, we provide financial support to set up and maintain their home workspace. nib's approach to flexibility is focused on personalisation and giving our employees choice - not only in where they work, but also when and how.

Other benefits to support you at work (and play) include:
- Generous discounts on nib health and travel insurance products including 50% discount on employee health insurance- The opportunity to give back to the community through paid leave for volunteering through nib Foundation- Support your better health - whatever that looks for you - through our nib Well Program and corporate fitness discounts- Access to our employee share plans, short-term incentive program and life and salary continuance insurance benefits- Benefits to support our diverse workforce with 18 weeks paid parental leave for all new parents regardless of carer status, 5 days paid cultural leave for First Nations peoples and 4 weeks paid gender affirmation leave for trans, gender diverse and intersex employees

The fine print

All your information will be kept confidential according to EEO guidelines. Successful applicants will be required to complete a background check (including criminal history and bankruptcy check) prior to commencement of employment.

We acknowledge Aboriginal and Torres Strait Islander peoples as the Traditional Custodians of the lands where we live, learn and work.