ISMS Manager

About this role
As the ISMS Manager, you will lead the ongoing operation and continuous improvement of nib Group’s Information Security Management System (ISMS), ensuring alignment with ISO 27001 standards and evolving business needs.

Acting as a subject matter expert, you'll coordinate audits, risk assessments, control frameworks and compliance activities across the Group, while partnering closely with Cyber, SecOps, Enterprise Risk, technology and business teams.

You'll also oversee PCI compliance, contract security obligation management, policy governance, and technology risk initiatives, helping strengthen security maturity, support strategic growth and meet regulatory and stakeholder expectations.

About you

You'll bring strong experience in technology risk, governance and assurance within complex enterprise environments, with a deep understanding of how effective controls and frameworks support business objectives while managing risk. You'll be confident partnering with stakeholders across technology, risk and compliance functions to drive governance outcomes and strengthen organisational resilience.

You'll have hands-on experience operating and continuously improving a certified ISO 27001 Information Security Management System (ISMS), with a solid understanding of regulatory and industry frameworks such as APRA CPS 220, CPS 234 and PCI DSS. Experience developing, implementing and maintaining control effectiveness measures, including Control Self-Assessments (CSAs), Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs), will be highly regarded.

Furthermore, we’re looking for:

• Experience working with stakeholders to develop, implement, review and mature governance and assurance controls, with a focus to driving a culture of transparency and IT risk awareness within an enterprise setting

• Demonstrated experience in supporting technology audits as a key stakeholder

• Excellent verbal and written communication skills

• Confidence and competence presenting to a range of technology and business stakeholder cohorts

• A hunger for knowledge in the IT Risk and cyber security space

• High level working understanding and familiarity with current cyber security controls and concepts

• Working knowledge of relevant cybersecurity frameworks and standards, including NIST CSF, ASD Essential Eight

• Knowledge of Australian privacy obligations and their intersection with information security design

• Cybersecurity and IT Risk certifications (e.g. CRISC, CGRC, CISSP) are highly regarded

• Information science, computer science, cybersecurity or equivalent computing degree highly regarded

We know some people only apply when they meet every requirement. We’re always on the lookout for curious individuals who will add to the culture – so if this role resonates with you and you have relevant experience, we’d love to hear from you!

Who we are
nib is a leader in private health insurance, disability support and health services, reshaping the industry through bold innovation, strategic disruption and trusted partnerships. We deliver great value health insurance and support services to protect, connect and empower you to access healthcare when and where you need.

We have a mission and vision of people enjoying better health. Through our success, we aspire to more prosperous and sustainable communities, helping members and travellers make more informed healthcare decisions and generally live healthier lives. 

Diversity, equity and inclusion

We embrace a flexible working environment and welcome candidates who reflect the diversity of the communities in which we operate. We're committed to an environment where everyone has the autonomy and freedom to be their authentic selves, every day. We encourage Aboriginal and Torres Strait Islander peoples, people living with disability, veterans, LGBTQIA+ as well as culturally diverse community members to apply for open roles.

We’re committed to creating an accessible recruitment process and employment experience. If you require adjustments to our online application, recruitment, selection and/or assessment process, or would like this advertisement in an alternative format, please contact us at nibemployment @nib.com.au.

Working at nib

Our hybrid working model offers flexibility to work from home or our purpose-built office Hubs, designed for focus, connection, and collaboration. We’re committed to coming together with purpose.

Other benefits to support you at work (and play) include:

• New starter benefit to help set up a functional home workspace

• 50% discount on employee health insurance + 35% off travel insurance

• Opportunity to give back with paid volunteering leave supported by the nib foundation

• Access to our nib Well Program and corporate fitness discounts

• Access to employee share plans, short-term incentive program and life and salary continuance insurance benefits

• 18 weeks paid parental leave for all new parents regardless of carer status

• 5 days paid cultural leave for First Nations peoples

• 4 weeks paid gender affirmation leave for trans, gender diverse and intersex employees

The fine print

All your information will be kept confidential according to EEO guidelines. Successful applicants will be required to complete a background check (including criminal history and bankruptcy check) prior to commencement of employment. 

We acknowledge Aboriginal and Torres Strait Islander peoples as the Traditional Custodians of the lands where we live, learn and work.

Next steps: If successful, you will receive an email from Sapia.ai inviting you to complete an online, chat‑based assessment.