GRC Manager - Cybersecurity

DEFEND Limited; Auckland; Hybrid; NZD 120,000 - 180,000; Full time

Benefits offered by this job

KiwiSaver 3.5%

Health Insurance

Mobile & Broadband discounts

Flexible, hybrid work

Home office setup allowance

Employee wellbeing support

Job summary

DEFEND Limited in Auckland is seeking a GRC Manager to lead governance, risk, compliance, security and privacy capabilities, shaping strategy with senior stakeholders.

You will embed risk into decision making, manage audits and certifications, and strengthen security posture through policy development and data governance. The role reports to executive leadership and influences the cybersecurity roadmap.

Qualifications

• Proven experience in Governance, Risk and Compliance (GRC) and related disciplines.
• Knowledge of ISO 27001, SOC 2, NIST, COSO, GDPR, and other regulatory requirements.
• Experience developing and improving risk management and compliance frameworks.
• Experience leading external audits, certifications and assurance activities.
• Strong ability to translate complex risk into practical business solutions.

Responsibilities

• Manage DEFEND's GRC capability by leading and improving governance, risk, compliance, security and privacy frameworks.
• Maintain trust through ISO certifications, SOC 2 attestations and other obligations.
• Embed risk into decision making by partnering with leaders to integrate risk management.
• Lead enterprise risk activities including customer, supplier, project, software and privacy risk assessments.
• Strengthen security posture via policy development, control uplift and data governance.
• Support strategic outcomes and advise on key security, privacy and risk decisions.
• Provide trusted executive reporting to the ELT, Board and governance forums.

Skills

GRC

Info security

Privacy

Audits

Governance

Risk management

Stakeholder comms

Project management

Incident response

Continuous improvement

Job description

At DEFEND, our dream is to improve everyday life by creating a cyber resilient world. We're looking for a GRC Manager to help protect and strengthen our business by managing our governance, risk, compliance, security and privacy capability.

This is a unique opportunity to influence business strategy and work closely with the senior stakeholders, to ensure DEFEND continues to operate with the highest standards of trust, resilience and assurance.

What you will do

• Manage DEFEND's GRC capability by leading and continuously improving our governance, risk, compliance, security and privacy frameworks.
• Maintain trust and assurance through the successful renewal of DEFEND’s ISO certifications and SOC 2 attestations, plus other security, privacy and compliance obligations.
• Embed risk into decision making partner with leaders across the business by integrating risk management into everyday operations.
• Lead enterprise risk activities including customer, supplier, project, software and privacy risk assessments.
• Strengthen DEFEND's security posture through policy development, control uplift, data governance and security awareness initiatives.
• Support strategic outcomes contribute to DEFEND's cybersecurity roadmap and advise on key security, privacy and risk decisions.
• Provide trusted executive reporting to the ELT, Board and governance forums on risk, compliance, privacy and security matters.

The skills & experience you will bring to DEFEND

• Proven experience in Governance, Risk and Compliance (GRC), information security, privacy, risk management or related disciplines.
• Strong working knowledge of recognised frameworks and standards such as ISO 27001, SOC 2, NIST, COSO, GDPR and other relevant regulatory requirements.
• Demonstrated experience developing, implementing and continuously improving risk management and compliance frameworks.
• Experience leading or coordinating external audits, certifications and assurance activities.
• Strong understanding of governance practices, risk management methodologies and compliance obligations.
• Excellent communication skills, with the ability to influence and engage stakeholders from operational teams through to Executive and Board level.
• Proven ability to translate complex risk and compliance requirements into practical business solutions.
• Strong project management and organisational skills, with the ability to juggle competing priorities and deliver outcomes in a dynamic environment.
• A highly collaborative approach and the ability to build trusted relationships across a diverse range of stakeholders.
• Experience responding to security, privacy or compliance incidents would be highly regarded.
• A continuous improvement mindset and a genuine passion for creating secure, resilient organisations.
• Comfortable rolling up your sleeves, adapting to change and contributing wherever needed to support the wider DEFEND business.

Our dream at DEFEND is to improve everyday life by creating a cyber resilient world. Over the last few years, we've experienced phenomenal growth, working with a wide variety of customers and winning several industry awards, including Microsoft's Global Partner of theYear for 2025!

Why DEFEND?

We believe in investing in our employees’ growth and providing them with opportunities to advance their skills and careers. We offer a collaborative workplace culture, and we are committed to fostering an inclusive environment where innovative thinking is encouraged.

By joining our innovative and creative team you will have the opportunity to contribute a variety of cybersecurity outcomes, from culture & awareness of cyber resilience, through to offensive & defensive security. No matter what your role, everyone at DEFEND contributes towards our dream ofcreating a cyber resilient world.

The benefits of working at DEFEND

In addition to workingfor a growing, dynamic NZcompany, DEFEND offers the following benefits to all ourDEFENDers

• 3.5%Kiwisaveron top of your base salary
• Southern Cross Health Insurance coverage
• Mobile and Broadband discounts for yourself and family
• Flexible, hybrid work environment
• An allowance to contribute to your home office setup
• Access to EAP services to support youacross a range of wellbeing needs

Diversity & Inclusion:

At DEFEND, we celebrate a variety of perspectives and experiences. We know from experience that people from underrepresented groups often don’t apply for roles they don’t feel they meet all the criteria for. We’re committed to creating an environment that enables all our team to thrive. If you think you have what it takes, but don’t check every single box, please consider applying. We’d love to hear how you might contribute to the team and being our next DEFENDer.