Cybersecurity & Governance Analyst
Summary
Miga, a medical indemnity insurer in Adelaide, is hiring a Cybersecurity & Governance Analyst to build and maintain its information security governance framework: writing policies, monitoring risks and incidents, managing audits and awareness training, and board reporting, reporting to the IT Manager. Key frameworks: COBIT, NIST, ITIL, APRA CPS 234.
Elevate your career with Miga
For more than 125 years, Miga has supported healthcare professionals across Australia with trusted medical indemnity insurance and expert guidance to help them practise with confidence.
The Opportunity
We are seeking an experienced and proactive Cybersecurity & Governance Analyst to join our Corporate Services team based in Adelaide.
This is an exciting opportunity for an information security professional who is passionate about cyber governance, risk management, compliance, and building a strong security culture within a purpose-driven organisation.
Reporting to the IT Manager, you will play a key role in enhancing Miga's information security governance framework, strengthening cyber resilience, and ensuring compliance with organisational and regulatory requirements. You will work closely with internal stakeholders and external partners to develop security policies, manage security awareness initiatives, oversee governance and risk activities, and support the ongoing protection of Miga's systems, data and technology environment.
Working across the business, you will contribute to strategic security initiatives while helping ensure our information assets remain secure, compliant and well-governed.
Key Responsibilities include but are not limited to:
Develop, implement and maintain Miga's Information Security Governance Framework
Develop and review information security policies, procedures and standards
Monitor security risks, vulnerabilities and compliance obligations across the organisation
Participate in security audits and coordinate responses to audit findings and recommendations
Support the design, implementation, testing and monitoring of security controls
Manage information security incident response plans and testing activities
Conduct third-party security and risk assessments with vendors and partners
Deliver and coordinate the organisation's security awareness and training program
Monitor networks and cloud environments to identify and respond to security incidents
Investigate security alerts and recommend remediation actions
Prepare operational, governance and board reporting relating to cybersecurity and risk
Collaborate with stakeholders to strengthen data governance, ownership and security awareness
Develop security risk assessments, risk management strategies and business cases for security initiatives
Work with external cybersecurity partners to continuously improve Miga's security posture.
What we’re looking for
Success in this role comes from strong technical knowledge, sound judgement, excellent stakeholder engagement skills and the ability to balance cybersecurity, governance and business needs.
We're seeking someone who brings:
Experience in cybersecurity, IT governance, information security, risk management or compliance
Strong knowledge of information security governance frameworks such as COBIT, NIST or similar
Experience developing and implementing security policies, standards and procedures
Knowledge of cloud environments and modern security practices
Experience conducting security risk assessments and developing risk mitigation strategies
Strong understanding of security controls, monitoring and incident response processes
Experience preparing governance, compliance and operational reports
Excellent communication and stakeholder management skills
Strong analytical and problem-solving capabilities
Ability to influence and build security awareness across all levels of an organisation
A collaborative approach and commitment to continuous improvement.
Desirable:
Experience within financial services, insurance or other highly regulated industries
Knowledge of APRA Prudential Standards including CPS 234, CPG 234 and CPS 235
Experience working with external auditors and regulatory compliance frameworks
Experience implementing data governance models and information management practices
Exposure to security technologies and monitoring platforms including firewalls, endpoint protection and cloud-based security solutions.
Qualifications:
Tertiary qualification in Information Technology, Cybersecurity or a related discipline
ITIL certification
COBIT, NIST or equivalent governance framework certification or experience
CompTIA Security+ or similar industry-recognised cybersecurity certification
Minimum 3-5 years' experience in an information security, governance, risk or compliance role
The benefit to you:
When you join Miga, you become part of a supportive, values‑driven organisation that invests in your wellbeing, growth, and long‑term success. We offer a range of benefits designed to help you thrive both professionally and personally, including:
Competitive remuneration, plus an additional 1.5% super contribution
Salary continuance insurance (income protection)
Free travel insurance
Wellness leave and other wellbeing initiatives
Access to a confidential Employee Assistance Program (EAP)
Paid parental leave – 12 weeks for primary caregivers and 3 weeks for secondary caregivers
Professional development opportunities to support long‑term career growth
Flexible work arrangements to help you balance work and life
If you’re seeking a role where you can make meaningful impact while enjoying genuine support and flexibility, we’d love to hear from you.
How to Apply
Click Apply to submit your resume by Friday, 30 October 2026.
For a Position Description or further queries, contact People & Culture on 1800 777 156 or hr@miga.com.au.
Miga is an Equal Opportunity Employer committed to fostering a diverse, inclusive and safe workplace. We welcome applicants from all backgrounds and experiences and value the perspectives they bring to our organisation.