Security GRC Analyst

at  Medibank

WILL YOU ACTIVELY CREATE A HEALTHIER FUTURE FOR TOMORROW?

At Medibank we’re encouraged to think big. We have a clear purpose to impact better health outcomes for our customers, patients and our community.
We celebrate diversity of thought because we want to make better decisions for our customers. As we work towards our goal of better health for better lives, we value the knowledge and contribution of Aboriginal and Torres Strait Islanders. We are working hard to create an inclusive workplace and develop Indigenous careers.

THE ROLE:

As a Security GRC Analyst, you will play a vital role in safeguarding Medibank’s systems and data. Your responsibilities will include supporting security governance, risk management, and compliance initiatives. The Security GRC Analyst role is the perfect opportunity to be involved in all things security risk and contribute to the ever-growing security uplift across Medibank.

SOME OF YOUR DUTIES INCLUDE:

• Support and evaluation of implemented IT Security Policies, Standards and Procedures across the organisation.
• Contribute to the end-to-end process for third party security risk assessments, from triage through to reporting.
• Contribute to information security dashboard reporting and metrics.
• Ensure security practices are integrated into the organisation’s strategic and operational planning processes.
• Create, maintain, and continuously improve work processes and procedures to ensure repeatability, and where possible, automation of workflows.
• Review and assess security risk posture across the organisation and in relation to our third parties.
• Communicate and report gaps and remediation actions within a risk context and work closely with internal Medibank stakeholders and third-party contacts to ensure monitoring and oversight over agreed remediation plans is in place.
• Maintain IT Security Risk Registers to continuously track and drive mitigation and resolution efforts.
• Develop relationships with key stakeholders throughout T&O and the broader business.
• Continuously improve stakeholder engagement via inter-personal skills, process improvements, and other agile methodologies.
• Collaborate and work closely with Security Consulting, Security Operations, Risk, Procurement, Legal, and strategy and operations teams and functions.