ISMS Manager

nib Group; Newcastle City Council; On-site; AUD 140,000 - 190,000; Full time

Benefits offered by this job

New starter benefit

50% health insurance discount

35% travel insurance discount

Volunteer leave

Well Program access

Fitness discounts

Employee share plans

Short-term incentive program

Life and salary continuance insurance

Job summary

nib Group is seeking an ISMS Manager to lead the ongoing operation and continuous improvement of the company’s ISO 27001 Information Security Management System. The role involves coordinating audits, risk assessments, control frameworks, and compliance activities across the Group, while partnering closely with Cyber, SecOps, Enterprise Risk, technology and business teams.

You will oversee PCI compliance, contract security obligations, policy governance and technology risk initiatives to

Qualifications

• Experience operating and improving a certified ISO 27001 ISMS.
• Experience developing and maintaining control effectiveness measures (CSAs, KRIs, KPIs).
• Proven ability to coordinate audits, risk assessments and compliance activities across a complex enterprise.
• Strong partnering with Cyber, SecOps, Risk, technology and business teams.
• Understanding of regulatory and industry frameworks (NIST CSF, ASD Essential Eight).
• Knowledge of Australian privacy obligations and their intersection with information security design.

Responsibilities

• Lead operation and continuous improvement of nib Group's ISMS.
• Coordinate audits, risk assessments, control frameworks and compliance activities.
• Oversee PCI compliance, contract security obligations, policy governance and tech risk initiatives.
• Partner with cyber, SecOps, risk, technology and business teams.
• Support governance outcomes and organisational resilience across the enterprise.

Skills

ISO 27001

APRA CPS 220

APRA CPS 234

PCI DSS

CSAs

KRIs

KPIs

NIST CSF

ASD Essential Eight

Australian privacy obligations

CRISC

CGRC/CISSP

IT risk governance

Education

Information security degree

Computing degree

CRISC

CISSP

Job description

About this role

As the ISMS Manager, you will lead the ongoing operation and continuous improvement of nib Group’s Information Security Management System (ISMS), ensuring alignment with ISO 27001 standards and evolving business needs.

Acting as a subject matter expert, you’ll coordinate audits, risk assessments, control frameworks and compliance activities across the Group, while partnering closely with Cyber, SecOps, Enterprise Risk, technology and business teams.

You’ll also oversee PCI compliance, contract security obligation management, policy governance, and technology risk initiatives, helping strengthen security maturity, support strategic growth and meet regulatory and stakeholder expectations.

About you

You’ll bring strong experience in technology risk, governance and assurance within complex enterprise environments, with a deep understanding of how effective controls and frameworks support business objectives while managing risk. You’ll be confident partnering with stakeholders across technology, risk and compliance functions to drive governance outcomes and strengthen organisational resilience.

You’ll have hands-on experience operating and continuously improving a certified ISO 27001 Information Security Management System (ISMS), with a solid understanding of regulatory and industry frameworks such as APRA CPS 220, CPS 234 and PCI DSS. Experience developing, implementing and maintaining control effectiveness measures, including Control Self-Assessments (CSAs), Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs), will be highly regarded.

Furthermore, we’re looking for:

• Experience working with stakeholders to develop, implement, review and mature governance and assurance controls, with a focus to driving a culture of transparency and IT risk awareness within an enterprise setting

• Demonstrated experience in supporting technology audits as a key stakeholder

• Excellent verbal and written communication skills

• Confidence and competence presenting to a range of technology and business stakeholder cohorts

• A hunger for knowledge in the IT Risk and cyber security space

• High level working understanding and familiarity with current cyber security controls and concepts

• Working knowledge of relevant cybersecurity frameworks and standards, including NIST CSF, ASD Essential Eight

• Knowledge of Australian privacy obligations and their intersection with information security design

• Cybersecurity and IT Risk certifications (e.g. CRISC, CGRC, CISSP) are highly regarded

• Information science, computer science, cybersecurity or equivalent computing degree highly regarded

Who we are

nib is a leader in private health insurance, disability support and health services, reshaping the industry through bold innovation, strategic disruption and trusted partnerships. We deliver great value health insurance and support services to protect, connect and empower you to access healthcare when and where you need.

We have a mission and vision of people enjoying better health. Through our success, we aspire to more prosperous and sustainable communities, helping members and travellers make more informed healthcare decisions and generally live healthier lives.

Diversity, equity and inclusion

We embrace a flexible working environment and welcome candidates who reflect the diversity of the communities in which we operate. We’re committed to an environment where everyone has the autonomy and freedom to be their authentic selves, every day. We encourage Aboriginal and Torres Strait Islander peoples, people living with disability, veterans, LGBTQIA+ as well as culturally diverse community members to apply for open roles.

We’re committed to creating an accessible recruitment process and employment experience. If you require adjustments to our online application, recruitment, selection and/or assessment process, or would like this advertisement in an alternative format, please contact us at nibemployment @nib.com.au.

Working at nib

Our hybrid working model offers flexibility to work from home or our purpose-built office Hubs, designed for focus, connection, and collaboration. We’re committed to coming together with purpose.

Other benefits to support you at work (and play) include:

• New starter benefit to help set up a functional home workspace

• 50% discount on employee health insurance + 35% off travel insurance

• Opportunity to give back with paid volunteering leave supported by the nib foundation

• Access to our nib Well Program and corporate fitness discounts

• Access to employee share plans, short-term incentive program and life and salary continuance insurance benefits

• 18 weeks paid parental leavefor all new parents regardless of carer status

• 5 days paid cultural leave for First Nations peoples

• 4 weeks paid gender affirmation leave for trans, gender diverse and intersex employees

The fine print

All your information will be kept confidential according to EEO guidelines. Successful applicants will be required to complete a background check (including criminal history and bankruptcy check) prior to commencement of employment.

We acknowledge Aboriginal and Torres Strait Islander peoples as the Traditional Custodians of the lands where we live, learn and work.