Cyber Security Manager

Generate KiwiSaver Scheme; Auckland; On-site; NZD 120,000 - 170,000; Full time

Benefits offered by this job

Health insurance

Discounted gym membership

Additional KiwiSaver contribution

Corporate benefits

Proactive Health & Wellbeing Committee

Ongoing training and support

Job summary

Generate KiwiSaver Scheme in Auckland seeks a Cyber Security Manager to own day-to-day execution of the security programme. You will translate leadership direction into actions, run assurance tasks, coordinate incident response, manage vulnerabilities and maintain policy and vendor landscapes to stay audit-ready.

You will drive the security roadmap, lead testing and remediation, and partner with engineering to embed secure SDLC practices while improving security awareness across the organization.

Qualifications

• At least 7+ years in security operations, governance or GRC.
• Knowledge of NZ financial services regulatory landscape (FMA, Privacy Act).
• Hands-on vulnerability management, incident response and assurance experience.
• Experience in regulated industries such as financial services or healthcare.
• Familiarity with NZ security frameworks (e.g., NIST CSF).
• Experience coordinating penetration testing or working with vendors.

Responsibilities

• Own and drive the security roadmap, delivering reporting to leadership.
• Lead security assurance and testing, coordinate penetration testing and remediation.
• Own vulnerability and patch management with engineering teams.
• Lead incident response with plans, runbooks and simulations.
• Raise security awareness through phishing simulations and trainings.
• Manage security vendors and contracts, renewals and performance.
• Evolve security policies and SDLC in partnership with engineering.
• Collaborate across Technology to turn security requirements into actions.
• Use AI, automation and digital tools to improve the security programme.

Skills

Security operations

Security governance

GRC (governance, risk, compliance)

Incident response

Education

Bachelor's degree in Computer Science or related field

Job description

About Us

We are a proudly New Zealand-owned, award-winning KiwiSaver and wealth manager. Our mission is to educate and empower our customers to make sound financial decisions and achieve strong long-term performance. With a relentless focus on these goals, we are dedicated to growing Kiwis' wealth and helping them attain better financial outcomes in retirement.

At our core, we are a purpose-driven business, caring deeply about making a difference. Our passionate team plays a crucial role in bringing our mission to life. We foster a culture of idea-sharing and empowerment, encouraging our people to lead initiatives that positively impact our business, community, and members.

The Role

As the Cyber Security Manager, you will own the day-to-day execution, tracking and reporting of Generate’s information security programme. You will translate strategic direction from executive leadership and Generate’s external security advisory relationship into operational reality – running assurance activities, coordinating incident response, driving vulnerability and patch management, and maintaining the policy and vendor landscape that keeps Generate secure and audit-ready. This is an execution and delivery role, accountable for making that direction real, on schedule and well documented.

You will

• Own and drive the security roadmap, tracking delivery, risks and priorities and providing clear reporting and insights to leadership.
• Lead security assurance and testing, coordinating penetration testing and security assessments and driving findings through to remediation and closure.
• Own vulnerability and patch management, working closely with engineering squads and Tech Leads to identify, prioritise and resolve security vulnerabilities.
• Lead incident response, maintaining response plans and runbooks, coordinating incidents and running simulations and tabletop exercises.
• Drive security awareness across Generate, including phishing simulations, training and communications that improve security behaviours.
• Manage key security vendors and partners, ensuring performance, relationships and renewals are effectively managed.
• Own and evolve security policies and standards, including developing our secure Software Development Lifecycle (SDLC) policy in partnership with engineering.
• Partner across Technology and the wider business, turning security requirements into practical actions and ensuring risks don't quietly stall.
• Use AI, automation and digital tools to continually improve the efficiency and effectiveness of our security programme.

About You

Qualifications (or equivalent level of learning)

• Relevant Bachelors degree in Computer Science or related field.

Experience

• At least 7 years’ experience in security operations, security governance or GRC.
• Working knowledge of the New Zealand regulatory landscape relevant to a financial services entity, including FMA expectations and Privacy Act obligations.
• Hands‑on experience running vulnerability management, incident response and assurance processes personally.
• Experience in a regulated industry such as financial services, insurance or healthcare.
• Familiarity with security frameworks relevant to NZ financial services, such as NIST CSF.
• Experience coordinating penetration testing, purple team exercises, or working directly with penetration testing / security vendors.
• Confidence having direct, sometimes difficult conversations with people managers about their team’s security behaviour.

What’s in it for you?

• A rewarding role with ongoing growth.
• Competitive base salary + bonus package.
• Competitive benefits package including health insurance, discounted gym membership, additional KiwiSaver contribution, corporate benefits and more!
• Proactive Health & Wellbeing Committee who organise a full calendar of events and initiatives.
• Ongoing training and support.
• Comfortable and central Auckland CBD office location.