GRC Lead for Cyber Resilience & Compliance

DEFEND; Auckland; Hybrid; NZD 120,000 - 170,000; Full time

Benefits offered by this job

Hybrid work environment

KiwiSaver 3.5%

Healthcare coverage

Home office allowance

Job summary

DEFEND in Auckland is seeking a GRC Manager to lead governance, risk, compliance, security and privacy capabilities across the business.

You will partner with senior stakeholders to embed risk into decision making, manage audits and certifications, and drive continuous improvement of our GRC framework while strengthening our cyber resilience. You will report to the ELT and Board, articulating risk posture and influencing strategy across disciplines.

Qualifications

• Proven experience in GRC, information security, privacy, or related disciplines.
• Strong knowledge of ISO 27001, SOC 2, NIST, COSO, GDPR and regulatory requirements.
• Experience building, implementing and improving risk management and compliance frameworks.
• Experience leading or coordinating external audits, certifications and assurance activities.
• Ability to translate complex risk requirements into practical business solutions.

Responsibilities

• Manage DEFEND's GRC capability by leading and improving governance, risk, compliance, security and privacy frameworks.
• Maintain trust and assurance through ISO certifications and SOC 2 attestations and other obligations.
• Embed risk into decision making by partnering with leaders across the business.
• Lead enterprise risk activities including customer, supplier, project, software and privacy risk assessments.
• Strengthen DEFEND's security posture through policy development, control uplift and data governance.
• Support strategic outcomes and advise on key security, privacy and risk decisions.
• Provide trusted executive reporting to the ELT, Board and governance forums.

Skills

GRC governance

Information security

Risk management

Audits & certifications

ISO 27001

SOC 2

NIST

GDPR

Stakeholder engagement

Communication skills

Strategic advisory

Job description

DEFEND in Auckland is seeking a GRC Manager to lead governance, risk, compliance, security and privacy capabilities across the business.

You will partner with senior stakeholders to embed risk into decision making, manage audits and certifications, and drive continuous improvement of our GRC framework while strengthening our cyber resilience. You will report to the ELT and Board, articulating risk posture and influencing strategy across disciplines.