Background information about the job or company (e.g., role context, company overview)

You’re only human. 

It’s a strange thing to say, because us humans are capable of incredible things. And at Medibank, we know our greatest potential lies in the people who work with us. 

We strive to make real, fundamental change, driven by a simple purpose: to create the best health and wellbeing for all of Australia.

We are looking for an experienced, hands‑on Enterprise Architect – Security to lead security architecture and roadmap delivery across our enterprise technology landscape. You’ll own security strategy, architecture patterns and governance for Data & Technology, partner closely with Information Security, Platform and IT Service Owners, and drive delivery of secure, resilient solutions that protect customer data and support business objectives.

Responsibilities or duties

• Develop and maintain enterprise information security strategy, target architectures and multi‑year roadmaps (Infrastructure, Security, Data, Application, Cloud).
• Lead the D&T Security architecture function (enterprise, domain, platform and solution architecture practices).
• Provide technical leadership and hands‑on architecture services to design secure solutions ensuring confidentiality, integrity and availability.
• Partner with senior stakeholders (Board, Group, Hubs, Squads) to translate business strategy into pragmatic security architecture and investment decisions.
• Define and maintain architecture reference models, standards, patterns and guardrails.
• Run and support enterprise architecture governance, reporting and compliance (including APRA CPS 230/231, ISO27001, PCI-DSS).
• Drive metrics, OKRs/KPIs, capability uplift, and architecture practice operations (education, engagement, masterclasses).
• Coach and grow the Architecture Security team; attract and retain diverse talent.
• Assess emerging technologies, enable innovation safely, and manage risks and controls across the architecture portfolio.

Qualifications or requirements (e.g., education, skills)

Must‑have experience & skills

• 7+ years delivering business‑outcome focused security solutions/architecture in corporate environments.
• Experience leading security architecture teams of senior and solution architects.
• Strong strategic thinker able to translate business priorities into pragmatic architecture roadmaps.
• Proven delivery of target state architectures and roadmaps across cloud, platform and application landscapes.
• Solid understanding of enterprise architecture frameworks and pragmatically applying them (e.g. TOGAF, SAFe).
• Practical knowledge across security domains: Governance, IAM, Asset & Data Security, Network/Endpoint, Application Security, Vulnerability Management, Cloud Security, SIEM, Incident Response & Recovery.
• Experience applying NIST Cybersecurity Framework and other standards to assess maturity and drive capability uplift.
• Strong stakeholder management, workshop facilitation and communication skills.

Desirable

• Industry certifications (CISSP, CISM, SANS GIAC).
• Experience delivering security architecture for large transformation programs.
• Prior experience in financial services or healthcare, and within ASX‑listed organisations.
• Understanding of cost models, budgeting and value‑based investment decisions.

• Develop and maintain enterprise information security strategy, target architectures and multi‑year roadmaps (Infrastructure, Security, Data, Application, Cloud).
• Lead the D&T Security architecture function (enterprise, domain, platform and solution architecture practices).
• Provide technical leadership and hands‑on architecture services to design secure solutions ensuring confidentiality, integrity and availability.
• Partner with senior stakeholders (Board, Group, Hubs, Squads) to translate business strategy into pragmatic security architecture and investment decisions.
• Define and maintain architecture reference models, standards, patterns and guardrails.
• Run and support enterprise architecture governance, reporting and compliance (including APRA CPS 230/231, ISO27001, PCI-DSS).
• Drive metrics, OKRs/KPIs, capability uplift, and architecture practice operations (education, engagement, masterclasses).
• Coach and grow the Architecture Security team; attract and retain diverse talent.
• Assess emerging technologies, enable innovation safely, and manage risks and controls across the architecture portfolio.

• Strong strategic thinker able to translate business priorities into pragmatic architecture roadmaps.
• Proven delivery of target state architectures and roadmaps across cloud, platform and application landscapes.
• Solid understanding of enterprise architecture frameworks and pragmatically applying them (e.g. TOGAF, SAFe).
• Practical knowledge across security domains: Governance, IAM, Asset & Data Security, Network/Endpoint, Application Security, Vulnerability Management, Cloud Security, SIEM, Incident Response & Recovery.
• Experience applying NIST Cybersecurity Framework and other standards to assess maturity and drive capability uplift.
• Strong stakeholder management, workshop facilitation and communication skills.

• 7+ years delivering business‑outcome focused security solutions/architecture in corporate environments.
• Experience leading security architecture teams of senior and solution architects.
• Industry certifications (CISSP, CISM, SANS GIAC).
• Experience delivering security architecture for large transformation programs.
• Prior experience in financial services or healthcare, and within ASX‑listed organisations.
• Understanding of cost models, budgeting and value‑based investment decisions.