Information Security Analyst (George)

Job description

Information Security Analyst

Location: George, South Africa 

About Pacific International Insurance

Pacific International Insurance has been helping Australians protect what matters for over 20 years. Backed by the global strength of Badger International, an insurance organisation with international interests, Pacific delivers trusted, quality insurance products across Australia and New Zealand, with full international endorsement. As an Australasian insurance underwriting company, Pacific offers a range of personal and business insurance solutions across various brands.

Pacific's business philosophy is to provide soft landings through all interactions with partners, customers, community, staff, and the broader industry, and this commitment sits at the core of every product we build and every service we deliver.  This is a business that values analytical rigour, commercial integrity, and people who want to do meaningful work in a collaborative, high-output environment.

About the role

We are looking for a passionate and detail-oriented Information Security Analyst who will help us drive information security (IS) across our organisation. This role will provide essential coordination and support across Pacific’s IS function, keeping IS governance, risk and assurance activities current, coordinated, and visible and ensuring day-to-day governance obligations are met. This includes the IS activity calendar, forum coordination, reporting packs, action tracking, and IS register maintenance, and supports the IS awareness program including IS threat bulletin preparation. The role will also own Pacific’s assigned governance domains beyond IS, currently AI governance, operationalising the AI Policy Framework (AIPF), AI registers, and supporting the related Governance Forum. The IS Analyst will work closely with the Head of IS and IS Senior Analyst, ensuring the IS function operates with discipline and consistency.

Key responsibilities:

Strategy, roadmap and investment

• Maintain IS business-as-usual tracking, monitoring progress against deliverables and flagging risks or delays to the head of information security.

People leadership and function development

• Contribute to a collaborative culture, setting a positive example and representing the team.
• Proactively develop IS knowledge and capability, engaging with development opportunities as agreed.
• Explore and adopt AI tools to improve the efficiency and quality of their own work, and contribute ideas for broader adoption.
• Identify and suggest improvements to IS team processes, templates, and coordination tools to support function efficiency and maturity.
• Operate effectively as part of a small, cross-functional team, bringing flexibility and breadth to support the IS function’s objectives.

Governance and framework ownership

• Maintain the ISPF structured-artefact repositories for IS governance documentation, ensuring consistent version control, naming conventions, and accessibility.
• Own and maintain Pacific’s IS registers, including the IS issue, exemption, control-testing, and third-party assurance registers, keeping all records current and accurate, and engaging the relevant stakeholders to obtain updates as required.
• Coordinate all IS governance forum logistics, including the ISWG and digital steering committee (DSC), managing scheduling, agenda preparation, and paper coordination and distribution, and tracking and following up all meeting actions.
• Produce IS reporting packs, collating data from registers, control-testing outcomes, and assurance activities to provide accurate, current information for governance reporting and decision-making.

Risk, assurance and compliance

• Support Pacific’s compliance with APRA CPS 234, including audit and assurance activities as required.
• Monitor IS risk assessment findings and open issues, tracking status and escalating overdue items to ensure timely remediation.

Security operations and resilience

• Maintain the IS activity calendar for scheduled recurring security activities, including penetration testing, backups, access reviews, incident response exercises, and disaster recovery tests, managing scheduling, communications, and stakeholder visibility.
• Track completion of recurring BAU security activities performed by the IT manager’s team, flagging gaps or delays.

Security awareness and stakeholder engagement

• Monitor emerging threats and regulatory developments, preparing draft threat and posture bulletins for the head of information security to review, contextualise, and finalise.
• Support delivery of Pacific’s security awareness program under the direction of the IS senior analyst, maintaining the awareness calendar, tracking completion of activities, and coordinating logistics for scheduled sessions.

Expanded governance (including AI)

• Support the IS function's expanding governance remit beyond IS, contributing to additional governance domains as required. This includes maintaining registers and policy framework artefact repositories, providing secretariat support, and preparing governance reporting. The current assigned governance domain is AI governance, which forms a significant part of this role.

Where you’ll work

• This role is based in George, South Africa. We strongly prefer candidates who are able to work on-site at our George office, however we are open to considering exceptional remote candidates within South Africa.
• Working hours will be semi-aligned to the Australian time zone: 05:00 to14:00 SA time – giving you more free time later in your day!

Why join us?

This is an excellent opportunity for a driven individual who is eager to learn and build a meaningful career in information security within a growing, internationally backed insurance business. You will gain hands-on experience to the world of IS governance, risk management, and assurance in a team which values precision, continuous learning, and collaborative problem-solving. If you are looking for a role where you can grow and work alongside experienced IS professionals, we would love to hear from you!

Requirements

• Genuine interest in developing expertise across, IS, AI governance, and technology risk.
• Prior experience in a coordination, administrative, or operational support role, where you managed recurring tasks, schedules, or documentation to deadline.
• Excellent written communication skills, with demonstrated ability to prepare clear, professional documentation such as reports, minutes, or governance materials.
• Confidence engaging and building working relationships with a range of stakeholders, including senior stakeholders, in a clear and professional manner.
• Attention to detail and a structured, methodical approach to administration, record-keeping, and register maintenance.
• Collaborative working style, with the initiative to work autonomously and follow through on actions without prompting.
• Proficiency in Microsoft 365 tools including Word, Excel, PowerPoint, Teams, and SharePoint.

This role is a genuine entry point into information security and beyond. If you meet most of these criteria and are keen to build a career in IS governance, risk and assurance, we encourage you to apply.

Bonus skills

• Tertiary qualification in information technology, cybersecurity, business, or a related discipline, or equivalent practical experience.
• Understanding of IS frameworks such as ISO 27001 or NIST CSF at a conceptual level.
• Experience coordinating governance committees, working groups, or board-level forums.

Posted on 03 Jul 15:25, Closing date 1 Aug