Chief Cyber Security & Risk Leader

Watercare; Auckland; On-site; NZD 180,000 - 240,000; Full time

Benefits offered by this job

Training and development opportunities

Life and income protection insurance

Generous parental leave

Employee discounts

Job summary

Watercare is seeking an experienced cyber security leader to join as Head of Cyber Security. Reporting to the Chief Digital Officer, you will be accountable for protecting Watercare’s information, systems and digital services by establishing and operating a fit-for-purpose cyber and information security capability.

You will lead risk identification, governance, and incident response, embed security across technology and business operations, and provide clear advisory to executives and the Board

Qualifications

• Senior leadership experience in cyber security or information security.
• Strong knowledge of cyber risk management, governance and assurance.
• Experience operating security functions within complex environments.
• Ability to communicate cyber risk clearly to non-technical executives.
• Experience leading security operations and cyber incident response.
• Strong stakeholder engagement, influencing and relationship-management skills.

Responsibilities

• Define and maintain Watercare’s enterprise cyber and information security strategy.
• Identify, assess and manage cyber risks across digital and technology services.
• Maintain the enterprise cyber risk register, including ownership, mitigation plans and reporting.
• Establish and operate security governance frameworks, policies and standards.
• Embed security-by-design principles across technology delivery and operations.
• Provide assurance on Watercare’s security posture to executive and Board governance forums.
• Oversee security monitoring, threat detection and incident response.
• Act as the senior escalation point for cyber incidents and coordinate response and recovery.
• Ensure incident response plans, playbooks and escalation pathways are established and tested.
• Lead post-incident reviews and drive continuous improvement.
• Oversee effective identity and access management practices.
• Protect sensitive information through appropriate classification, access controls and monitoring.
• Ensure compliance with relevant cyber security, privacy and regulatory requirements.
• Support internal and external audits and assurance activities.
• Lead security awareness and training programmes for our people and leaders.
• Partner with architecture, platforms, workplace, data and delivery teams to embed security across Watercare.
• Engage with external agencies, regulators and industry bodies as required.

Skills

Senior leadership

Cyber risk management

Security operations

Stakeholder engagement

Regulated environments

Security frameworks

Tools

NIST/ISO 27001

Job description

Watercare is seeking an experienced cyber security leader to join as Head of Cyber Security. Reporting to the Chief Digital Officer, you will be accountable for protecting Watercare’s information, systems and digital services by establishing and operating a fit-for-purpose cyber and information security capability.

You will lead risk identification, governance, and incident response, embed security across technology and business operations, and provide clear advisory to executives and the Board