Cyber Security Business Analyst

You’re only human.   

It’s a strange thing to say, because us humans are capable of incredible things. And at Medibank, we know our greatest potential lies in the people who work with us.   

We strive to make real, fundamental change, driven by a simple purpose: to create the best health and wellbeing for all of Australia.  

At Medibank, we're continuing to strengthen and evolve our cyber security capabilities across our network and cloud environments. We're seeking an experienced Business Analyst to join a high-profile Cyber Security Program delivering critical initiatives across cloud, network, identity and data platforms.

You'll play a key role in driving security uplift activities, partnering with technology, cyber security and business teams to deliver meaningful outcomes in a complex enterprise environment.

This is an initial 6-month daily rate contract ($850 per day) with a strong likelihood of extension. Starting in late October or early November, you'll work on strategic cyber security initiatives alongside architects, engineers, vendors and senior stakeholders to strengthen and protect systems that support millions of Australians.

What You'll Be Doing

• Lead discovery activities to understand current-state processes, data flows and security capabilities across network and cloud environments.
• Facilitate workshops and engage stakeholders to elicit, define and prioritise business and technical requirements.
• Document current and future-state processes, user journeys and requirements.
• Produce high-quality artefacts including business requirements, user stories, acceptance criteria and process maps.
• Support solution design and delivery alongside architects, engineers, DevSecOps teams and external partners.
• Perform gap analysis and maintain end-to-end traceability of requirements.
• Provide BA support across multiple cyber security initiatives within the program.

What We're Looking For

• Significant experience delivering business analysis outcomes within cyber security and information security programs.
• Experience across one or more of the following domains:
  • Cloud Security (AWS, Azure)
  • Network Security and Secure Access Service Edge 
  • Identity & Access Management 
  • Privileged Access Management 
• Ability to define and articulate current and future-state user journeys and business processes.
• Experience analysing large and complex data sets to generate actionable insights.
• Strong stakeholder engagement skills, with the ability to work effectively across highly technical and business-facing teams.
• Comfortable working autonomously in fast-paced environments with evolving priorities.

Knowledge & Qualifications

Strong understanding of cyber security frameworks, standards and regulatory requirements, including:

• APRA CPS 234 and CPG 234
• ISO 27001
• NIST Cybersecurity Framework
• Essential Eight
• Privacy Act and broader data protection regulations

Relevant certifications highly regarded: IIBA Certificate in Cybersecurity Analysis (CCA), CompTIA Security+, CISM, CRISC, ISC2 Certified in Cybersecurity, or ISO27001 Implementer/Auditor.

Imagine working with us 

We understand that work means different things to everyone...  We know happy, healthy people make great teams, and great teams put more heart into each customer and patient interaction. And that’s why we’re reinventing work.    

Imagine a workplace that helps you and your family thrive.  Where connection, personal development and health and wellbeing are front of mind. To learn more about our benefits go to https://careers.medibank.com.au/culture/rewards-benefits/

For you, work should help you Live Better. It should bring you fulfillment and joy. And with Medibank, it could. 

Inclusion and Accessibility  

We believe in everyone's potential and strive to make Medibank inclusive for all because different perspectives make us better. We encourage applications from everyone, including Aboriginal and Torres Strait Islander peoples, neurodivergent candidates, LGBTQIA+ community including transgender and gender diverse candidates and candidates with a disability.

If you need adjustments or alternative formats at any stage of the recruitment or employment journey, we’re here to help.  You can let us know directly in the application form, or if you’d prefer to discuss before applying, please reach out to us careers@medibank.com.au or (03) 8622 5666. Learn more about our commitments and employee stories at https://careers.medibank.com.au/diversity-inclusion/(please copy and paste the URL onto your browser)

Medibank proudly recognised as Best Enterprise Organisation, 2026 AFR BOSS Best Places to Work