Cyber Response Manager - Cyber Defence

Bank of New Zealand; Auckland; Hybrid; NZD 140,000 - 180,000; Full time

Benefits offered by this job

Generous leave

Flexible working

Wellbeing support

Job summary

Bank of New Zealand (BNZ) in Auckland is seeking a senior technical leader to direct the organization\'s incident response. You will oversee detection, containment and eradication of threats, and coordinate across teams during incidents.

This role requires hands-on expertise in DFIR, threat hunting, threat intelligence, and playbooks, plus strong leadership to mentor a Cyber Response team. This Auckland-based hybrid role requires three days in the office and two flexible days.

Qualifications

• Senior technical and leadership role directing organisation's response to security incidents.
• Hands-on expertise in DFIR, threat hunting and incident playbooks.
• Ability to coordinate across multiple teams during and after incidents.

Responsibilities

• Directs and coordinates high-stakes security incident response across teams.
• Leads investigations, containment, eradication and post-incident reviews.
• Develops and refines IRP and playbooks; conducts root cause analyses.
• Mentors Cyber Response Analysts and drives continuous improvement.

Skills

Team Leadership

Incident Response

Process Development

DFIR Expertise

Threat Intelligence

Tools

SIEM

EDR

NDR

SOAR

Job description

Here at BNZ, it's about more than just banking. We work together in an agile, energising environment to create innovative solutions through our promise "If you can imagine a better future, let's find a way."

We support wellbeing, flexible working and have a generous leave offering. There is the opportunity for growth, learning and career development. No two days are the same.

At the heart of BNZ's digital resilience is our cyber team - a passionate, high performing group of experts who protect our systems, data, and people from evolving cyber threats. Be part of one. In our Cyber Defence function, we combine cutting-edge technology with deep expertise to defend against real-world attacks, ensuring the trust of our customers and integrity of our operations.

You’ll collaborate across security operations, threat intelligence, incident response, and security engineering contributing to a culture of vigilance, innovation and continuous improvement.

If you’re driven by purpose, thrive in high-stakes situations, and want to work alongside some of the best minds in cyber security - this is the team for you.

This is an Auckland based hybrid role with three days in the office and two where you can work flexibly.

Mō te Tūranga | About the Role

We sat down with the People Leader (who you would report to) and they told us the following about the role:

What is the role like?

This role is a senior technical and leadership role responsible for directing the organization's response to security incidents. This leader manages the technical aspects of identifying, containing, and eradicating threats, and coordinates efforts across multiple teams during and after an incident. The ideal candidate is an experienced, hands-on expert who can lead high-stakes technical incidents while also driving strategic improvements in incident response capabilities. This role is critical for enhancing the organization's security posture and cyber resilience.

What attributes will this person display in order to be successful in this role?

• Team Leadership: Manage and mentor a team of Cyber Response Analysts by providing guidance and support in their daily tasks and long-term career development.
• Incident Response: Escalation point to lead or manage cyber investigations, leveraging threat hunting findings to understand the scope and impact.
• Process Development: Develop, maintain, and continuously refine the organization's incident response plan (IRP) and playbooks. Conduct post-incident reviews (Root Cause Analysis/After Action Reports) to identify lessons learned and implement process improvements.
• Technical Expertise: Extensive experience in DFIR, threat hunting, threat intelligence and / or detection engineering . Strong understanding of security tools such as SIEM, EDR, NDR and SOAR. Proficiency in analysing network traffic, malware, and security logs. Experience with incident response methodologies and playbooks. Familiarity with cloud security concepts and technologies .
• Problem-Solving: Excellent analytical and problem-solving skills to identify and resolve security issues. Ability to work under pressure and manage multiple incidents concurrently .

What is the most exciting thing about this opportunity?

BNZ is investing heavily in cyber protection. This team is an amazing place to be if you like being on the cutting edge of cyber security; learning new skills and getting involved in new capabilities and technologies.

Why did the last person leave this role?

This is a newly created role as part of BNZ's Cyber Defence operating model uplift. It reflects our commitment to modernising incident response and aligning with best practices in automation, orchestration, and threat management. The position offers expanded responsibilities and leadership scope to support our evolving security posture.

What is your favourite thing about working for BNZ?

Six weeks of Annual leave and the beautiful new Auckland offices!

PLEASE NOTE:

Advertising for this position closes Monday 23 November at 11pm. We review applications as they are received and may close advertising early.

Internally, this role is known as Platform Lead - Cyber.

Nau Mai ki te Pēke o Aotearoa | Come to the Bank of New Zealand

This is an exciting opportunity to join us! We’re bold thinkers who are taking brave steps to create a company that people want to work for, and customers want to bank with. If you’re ready to join a fun organisation where we are proud of our culture and how we are helping New Zealander's to 'Find their way'.

Ehara taku toa i te toa takitahi, engari he toa takitini

Applications will be reviewed regularly across the advertising period, but we do reserve the right to close applications early.