Info Security GRC Analyst

Remarkable people. Remarkable careers.

At GMHBA, every day is a chance to make a real impact on people's lives. Join our people-focused, not-for-profit health insurer and enjoy a flexible workplace, supportive culture, and a rewarding regional lifestyle. For 90 years, we've put our members, and our people, first. Make your career meaningful with GMHBA.

GMHBA is looking for a driven Information Security GRC Analyst to strengthen our cybersecurity governance, risk, and compliance capabilities. You'll assess and improve controls across systems, applications, and infrastructure, including those managed by third-party providers. You'll work closely with teams across the business as a trusted adviser, offering clear, practical guidance that supports confident decision-making and embeds strong, sustainable security practices into everyday work.

Why This Role is Exciting

• You'll translate technical understanding into practical outcomes that improve security across the business
• Work with modern technologies invested in by GMHBA to uplift capability and drive meaningful improvement
• Collaborate across IT, Risk, and Security teams, influencing governance and risk practices across the organisation

What You'll Do

• Test, assess, and monitor Information Security controls across systems, applications, and infrastructure
• Conduct cyber risk assessments, audits, and compliance reviews
• Work with stakeholders to remediate control deficiencies and strengthen governance
• Assist in maintaining compliance with regulatory obligations such as CPS 234, PCI DSS, and others
• Provide clear, practical advice to help teams make confident, risk-informed decisions

What You'll Bring

• Experience in Information Security or Cyber GRC, including testing control design and effectiveness
• Strong understanding of IT governance, cyber risk management, and regulatory frameworks
• Ability to conduct risk assessments and support audits
• Bonus: Knowledge of private health insurance, CPS 234, PCI-DSS, SOCI, or Privacy regulations
• Strong understanding of data and systems, enabling deeper insights into how controls operate in practice

Why GMHBA?

• Be part of a purpose-driven, collaborative environment
• Make a tangible impact on GMHBA's cybersecurity and compliance posture
• Work in a role that blends technical insight with practical business outcomes

Ready to start? If you're passionate about cybersecurity, risk, and governance, apply now to help GMHBA strengthen its security framework and build lasting impact!

If you believe you would be a great fit but don't quite tick all the boxes, we encourage you to apply.

Let's get started

Submit your application online today. Applications close on Friday,24th July 2026.

If you have any questions about this position or the recruitment process, please reach out to the careers team at [email protected].

At GMHBA, we are committed to building a diverse and inclusive workplace where everyone feels respected, valued, and empowered to be their authentic selves. We believe that inclusion strengthens our organisation, enriches our culture, and allows us to better support our members, patients, and communities. We actively welcome and encourage applications from people of all backgrounds, identities, and experiences.

In submitting an application, you agree that you have read and accepted the terms and conditions of our recruitment privacy statement: gmhba.com.au/privacy.