Cyber Security Risk Manager

H2R Consulting; Auckland; Hybrid; NZD 110,000 - 165,000; Full time

Benefits offered by this job

Hybrid working

Job summary

Jora New Zealand seeks an experienced Senior Risk Adviser to provide trusted IT risk advice across complex technology programmes and portfolios. This senior role strengthens risk management, supports certification and accreditation activities, and helps project teams understand and effectively manage technology risk.

You will work closely with programme teams, technology leaders and key stakeholders to provide practical risk oversight across projects and drive improved risk governance and

Qualifications

• 10+ years of IT risk experience.
• 3+ years organisational change management experience.
• Strong stakeholder management capability.
• Experience communicating risk concepts to diverse audiences.
• IT degree or equivalent practical experience.
• Certifications such as CISA, CIA or similar.

Responsibilities

• Provide specialist IT risk advice to projects and programmes.
• Support Certification & Accreditation activities.
• Complete initial solution and system risk assessments.
• Identify risks against established information security frameworks.
• Produce risk summaries for senior stakeholders.
• Support programme and portfolio managers with risk oversight.
• Improve risk governance and awareness across the organisation.
• Provide training and guidance on risk and accreditation processes.

Skills

IT risk

stakeholder management

risk assessment

training delivery

communication

change management

Education

IT degree

Job description

Jora New Zealand will close on 9th September 2026. Thank you for being with us, we are cheering you on as you continue your career journey.

• 6mth+ contract with competitive hourly rate
• Dedicated security project team

• Auckland based with hybrid working
• 6mth+ contract with competitive hourly rate
• Dedicated security project team

We are looking for an experienced Senior Risk Adviser to provide trusted IT risk advice and support across complex technology programmes and portfolios. This is a senior advisory role focused on strengthening risk management, supporting certification and accreditation activities, and helping project teams understand and effectively manage technology and information security risk.

Working closely with programme teams, technology leaders, service providers and key stakeholders, you will provide practical risk oversight across projects and systems, helping ensure risks are clearly understood, appropriately assessed and effectively managed.

What you’ll be doing

• Providing specialist IT risk advice to projects and programmes.
• Supporting Certification & Accreditation activities and ensuring risk requirements are incorporated into project planning.
• Completing initial solution and system risk assessments, as well as ad-hoc assessments where required.
• Identifying and assessing risks against established information security and risk frameworks.
• Producing clear risk summaries and presenting findings and recommendations to senior stakeholders.
• Supporting programme and portfolio managers with risk oversight and decision-making.
• Helping improve risk management processes, governance and awareness across the organisation.
• Providing training and guidance to project teams and stakeholders on risk and accreditation processes.

What we’re looking for

You’ll bring significant experience working across IT risk environments and be comfortable operating with a wide range of technical and business stakeholders.

Ideally, you will have:

• Around 10+ years’ experience within IT risk-related roles.
• At least three years’ organisational change management experience.
• Strong stakeholder and relationship management capability.
• Experience delivering training or communicating risk concepts to different audiences.
• An IT-related degree or equivalent practical experience.
• Relevant risk, audit or change certifications such as CISA, CIA or similar.
• Strong critical thinking, analysis and problem‑solving skills.
• Clear written and verbal communication skills, with the confidence to present complex risk issues in straightforward language.

You’ll be someone who can build trusted relationships, influence effectively and bring a pragmatic, solutions-focused approach to risk. You’ll be comfortable challenging where required while working collaboratively with teams to achieve practical business and technology outcomes.

This is a great opportunity for an experienced IT risk professional who enjoys working across complex programmes and wants to play an important role in improving technology risk management and information security outcomes.