Chief Information Security Officer

Tauranga; Tauranga; On-site; NZD 200,000 - 280,000; Full time

Benefits offered by this job

Five weeks' annual leave

Leadership development opportunities

Flexible working

Job summary

Tauranga City Council is seeking a strategic Chief Information Security Officer to shape the security posture across the organisation, manage cyber risk and lead the responsible adoption of AI. You’ll influence executive decision-making and champion enterprise architecture while guiding investment in resilient digital services for the Tauranga community.

Reporting to the Chief Digital Officer, you will drive governance, regulatory compliance, incident response readiness and cross-cutting

Qualifications

• Requires a degree-level qualification with postgraduate study preferred.
• 10+ years of leading cyber or information security programmes including senior/executive level.
• CISSP, CISM, CRISC or equivalent certification highly regarded.
• Experience leading security strategy, budgets, vendors and multidisciplinary teams.
• Strong knowledge of NZISM, Protective Security Requirements, ISO 27001, NIST, PCI DSS and Privacy Act 2020.
• Demonstrated experience managing significant cyber security incidents.
• Understanding of AI governance, responsible adoption and emerging technology risk.
• Ability to explain technical risk clearly to executives and regulators.
• Excellent relationship management and communication skills.

Responsibilities

• Lead the enterprise-wide information and cyber security strategy, governance framework and roadmap.
• Protect critical information, systems and digital services to maintain community trust.
• Strengthen cyber resilience and lead response to security incidents.
• Provide clear, independent advice to senior leaders and Elected Members.
• Guide investment priorities by translating cyber risk into business terms.
• Oversee security risk, regulatory compliance, third-party assurance and investigations.
• Establish security standards and guardrails for AI and automation.
• Champion AI governance and responsible use of emerging technology.
• Act as executive sponsor for Enterprise Architecture and align with strategy.
• Build relationships with government agencies, regulators and security leaders across NZ.

Skills

Security leadership

Strategic planning

Executive reporting

AI governance

Incident response

Stakeholder management

Education

Degree-level qualification

Postgraduate study

CISSP/CISM certification

Tools

NZISM

ISO 27001

NIST

PCI DSS

Privacy Act 2020

Job description

Select how often (in days) to receive an alert:

Te Tūranga | About the role

Tauranga is one of New Zealand's fastest-growing cities, and technology plays an increasingly critical role in supporting our community, services, and future growth. As our Chief Information Security Officer, you'll help shape how one of New Zealand's most progressive local authorities manages cyber security, digital risk, enterprise architecture, and the responsible adoption of artificial intelligence. This is a rare opportunity to shape the future of cyber security, digital trust and responsible AI adoption for one of New Zealand's fastest-growing cities.

This is a senior leadership role with organisation-wide influence and a unique opportunity to build lasting impact. Reporting to the Chief Digital Officer, you'll set the strategic direction for information and cyber security across the organisation, helping Council navigate an evolving threat landscape, increasing regulatory expectations, and rapid technological change. You'll provide trusted advice to the Chief Executive, Executive Leadership Team and Elected Members, ensuring cyber risk, resilience and digital trust remain central to organisational decision-making.

Beyond security, this role offers a uniquely broad leadership remit. You'll guide Council's approach to AI cyber governance as well as that of other emerging technologies while providing executive sponsorship to Enterprise Architecture. Working alongside senior leaders across the organisation, you'll help shape investment decisions, digital strategy and the secure delivery of services relied upon by our growing community.

This is an opportunity to influence not only Council's security posture but also how technology enables better outcomes for Tauranga for years to come. You'll help mature critical capabilities, build organisational resilience, and create a lasting legacy through secure and responsible digital leadership.

In this role, you’ll:

• lead our enterprise-wide information and cyber security strategy, governance framework and roadmap
• protect critical information, systems and digital services, helping maintain the community’s trust in Council
• strengthen cyber resilience and lead the organisational response to significant security incidents
• provide clear, independent advice and assurance to senior leaders and Elected Members
• guide investment priorities by translating cyber risk into practical business terms
• oversee security risk, regulatory compliance, third-party assurance and sensitive investigations
• establish appropriate security standards and guardrails for artificial intelligence and automation
• champion effective AI cyber governance and the responsible use of emerging technology
• act as executive sponsor for Enterprise Architecture, ensuring it informs strategy, investment and major change
• build strong relationships with government agencies, regulators, industry partners and security leaders across New Zealand.

Your work will help keep Council’s essential services secure and resilient. It will also enable our people to use new technology with confidence, supporting better decisions and better outcomes for Tauranga.

Ngā Pukenga | What you’ll need to succeed

You'll be an experienced and highly credible security leader who combines strategic vision with practical delivery. Equally comfortable discussing risk with elected members and executives or engaging with technical specialists, you'll inspire confidence, influence decisions and help embed a culture where security is understood, owned and practised across the organisation.

You'll be motivated by the opportunity to build capability, shape organisational direction and leave a lasting legacy through secure, resilient and responsible digital leadership.

To succeed in this role, you'll bring:

• a relevant degree-level qualification, preferably supported by postgraduate study
• at least 10 years' experience leading cyber or information security programmes, including at senior management or executive level (preferably at CISO level)
• a recognised industry certification such as CISSP, CISM, CRISC or equivalent
• experience leading security strategy, budgets, vendors and multidisciplinary teams in a complex organisation
• strong knowledge of relevant security frameworks, standards and legislation, including NZISM, Protective Security Requirements, ISO 27001, NIST, PCI DSS and the Privacy Act 2020
• demonstrated experience leading the response to significant cyber security incidents
• an understanding of AI governance, responsible adoption and emerging technology risk
• the ability to explain technical risk clearly to executives, governance groups, Elected Members and regulators
• excellent relationship management, communication and influencing skills.

Experience in local or central government, or another complex and highly regulated environment, will be valuable. Experience developing a security function, working with national cyber security agencies, or operating within a Senior Leadership Team environment would also be an advantage.

You’ll model collaborative leadership and support a workplace where security is understood, owned and practised by everyone. You’ll also be committed to our organisational values, health and safety, emergency management responsibilities, and our partnership with tangata whenua under Te Tiriti o Waitangi.

At Tauranga City Council, our work helps shape one of New Zealand's fastest-growing cities. From planning for growth and delivering critical infrastructure to creating great community outcomes, our people make a tangible difference every day.

This is an exciting time to join us. We're investing in our digital future, embracing innovation, strengthening organisational resilience and exploring how emerging technologies can create value for our community. As Chief Information Security Officer, you'll play a pivotal role in that journey.

Located in the beautiful Bay of Plenty, Tauranga offers the opportunity to lead meaningful, high-impact work while enjoying an exceptional lifestyle. Whether you're already here or considering a relocation, you'll find a vibrant city, strong sense of community and outstanding access to beaches, outdoor recreation and family-friendly living.

We offer:

• a genuine executive leadership opportunity with organisation-wide influence
• the opportunity to shape the future of cyber security, AI governance and enterprise architecture
• flexible and supportive ways of working
• five weeks' annual leave
• ongoing leadership and professional development opportunities
• meaningful work that directly impacts the resilience, security and digital future of our city.

If you're collaborative, forward-thinking and community-minded, you'll find meaningful work, talented colleagues and the opportunity to make a genuine difference here.

You can find out more about working at Tauranga City Council here .

Applications will close Friday 23rd October

We’re committed to building a diverse team that reflects the communities we serve. We welcome applications from people of all backgrounds, including those living with disabilities.

If you need any support or adjustments to take part in our recruitment process, please contact our Talent Acquisition team at [e-mail]

• You must have the legal right to live and work in New Zealand to apply for this role.
• Tauranga City Council does not accept unsolicited contact or applications from recruitment agencies. We will not pay fees or commissions related to unsolicited contact.