IT Security Designer

Will you actively create a healthier future for tomorrow?

At Medibank we’re encouraged to think big. We have a clear purpose to impact better health outcomes for our customers, patients and our community.

We celebrate diversity of thought because we want to make better decisions for our customers. As we work towards our goal of better health for better lives, we value the knowledge and contribution of Aboriginal and Torres Strait Islanders. We are working hard to create an inclusive workplace and develop Indigenous careers.

The Role

The IT Security Designer will be responsible for designing, testing and the ongoing management of IT security controls implementation across the IT infrastructure stack. You will be expected to contribute to the strategic direction and provide input on security roadmaps. This role will act as a conduit between the IT Security team and enterprise stakeholders by enabling the business to deliver projects and initiatives in a secure & timely manner.

The Responsibilities:

• Act as the subject matter expert in designing pragmatic IT security controls using industry best practices, standards and guidelines while matching the risk appetite of the business.
• Provide IT security advisory on the appropriateness and timeliness of IT security improvements. This also include supporting the implementation of technology changes.
• Support the delivery and design of enterprise security solutions while working with the project delivery teams, enterprise architects and solution designers to meet business outcomes.
• Assess and report on security control maturity and gaps using industry led enterprise risk management frameworks/procedures and support the development of remediation and improvement plans.
• Coordinate security assurance testing activities and ensure mitigation plans address identified gaps.
• Ensure IT security controls are effective and proportionate for the immediate and ongoing needs of a high growth and diverse organisation.
• Collect, analyse, and report on intelligence data and trends; to be used for executive awareness and strategic planning.
• Provide subject matter expertise when assessing and deploying processes and technologies to be used when dealing with emerging IT threats and vulnerabilities. While ensuring compliance with all regulatory obligations and applicable/relevant standards.
• Review and assess projects for security risk posture and define appropriate management plans.
• Deliver consistent effective/meaningful business reporting on security programs and initiatives.
• In partnership with Architecture teams, implement appropriate IT security design patterns, architecture framework and supporting processes.
• Design and maintain information data flows that conforms with security policy, standards, and regulatory requirements.
• Provide subject matter expertise in designing and overseeing implementation of controls used to detect suspect activity.
• Ensure IT systems have proper controls to detect and respond to suspicious activity that may indicate attacks or breaches to the internal network.

About You

• Experience in a similar within security and a strong in security design.
• Experience in security design, consulting & delivery of key organisational security capabilities across large and complex environments.
• Experience in Data Security controls and techniques such as Data Loss Prevention, Encryption etc.
• Experience in Information Security concepts such as risk management, security architecture, threat management, security governance and design.
• Cloud security design experience across IaaS, PaaS and SaaS.
• Experience or working in agile and waterfall delivery models.
• Understanding of security standards, project IT governance and frameworks such as: ITIL, CSA, OWASP, Australian Privacy Principles, APRA, PCI DSS, NIST, ISO 27001, ISM/ASD.

A career with us

At Medibank, we believe work is something we do, not somewhere we go. Our modes of working – Collaboration, Connection and Concentration – help inform how your day is structured and where you choose to work will vary, depending on your role and requirements.

The wellbeing of our employees is our priority. We encourage you to talk to us about any additional support you may require during the recruitment process, as well as how this role can be flexible for you. We encourage applications from candidates with a disability, if you require any adjustments or alternate formats of key information at any stage of the recruitment process, we welcome hearing from you via careers@medibank.com.au or (03) 8622 5666.

We offer a range of great benefits such as subsidised private health insurance, rewards and discounts, and health and wellbeing initiatives. To find out more, click here.

To start small and impact bigger.