Grc Manager - Cybersecurity

Defend Limited; Wellington; Hybrid; NZD 120,000 - 170,000; Full time

Benefits offered by this job

Kiwisaver

Health insurance

Hybrid work

Home office allowance

EAP services

Job summary

DEFEND Limited in New Zealand seeks a GRC Manager to lead governance, risk, compliance, security and privacy capabilities, partnering with senior stakeholders to uphold trust and resilience.

You will drive ISO and SOC 2 attestations, embed risk into decision making, and report to the ELT and Board on risk and security matters, shaping DEFEND's cybersecurity roadmap.

Qualifications

• Proven experience in GRC, security, or privacy disciplines.
• Knowledge of ISO 27001, SOC 2, NIST, COSO and GDPR.
• Experience leading audits and assurance activities.
• Ability to translate risk into practical business solutions.
• Strong communication and stakeholder engagement.

Responsibilities

• Lead and improve DEFEND's GRC capability across governance, risk, compliance, security and privacy.
• Maintain trust through ISO certifications and SOC 2 attestations.
• Embed risk into decision making with leaders across the business.
• Lead enterprise risk activities including customer, supplier and project risk assessments.
• Contribute to DEFEND's cybersecurity roadmap and advise on key security decisions.
• Provide executive reporting to ELT and Board on risk and compliance.

Skills

GRC experience

ISO 27001

SOC 2

NIST

COSO

GDPR

Risk framework development

Audit leadership

Governance knowledge

Stakeholder engagement

Practical risk solutions

Project management

Stakeholder collaboration

Incident response

Continuous improvement

Adaptability

Job description

Requirements

At DEFEND, our dream is to improve everyday life by creating a cyber resilient world. We're looking for a GRC Manager to help protect and strengthen our business by managing our governance, risk, compliance, security and privacy capability.

This is a unique opportunity to influence business strategy and work closely with the senior stakeholders, to ensure DEFEND continues to operate with the highest standards of trust, resilience and assurance.

What you will do

• Manage DEFEND's GRC capability by leading and continuously improving our governance, risk, compliance, security and privacy frameworks.
• Maintain trust and assurance through the successful renewal of DEFEND’s ISO certifications and SOC 2 attestations, plus other security, privacy and compliance obligations.
• Embed risk into decision making partner with leaders across the business by integrating risk management into everyday operations.
• Lead enterprise risk activities including customer, supplier, project, software and privacy risk assessments.
• Strengthen DEFEND's security posture through policy development, control uplift, data governance and security awareness initiatives.
• Support strategic outcomes contribute to DEFEND's cybersecurity roadmap and advise on key security, privacy and risk decisions.
• Provide trusted executive reporting to the ELT, Board and governance forums on risk, compliance, privacy and security matters.

The skills & experience you will bring to DEFEND

• Proven experience in Governance, Risk and Compliance (GRC), information security, privacy, risk management or related disciplines.
• Strong working knowledge of recognised frameworks and standards such as ISO 27001, SOC 2, NIST, COSO, GDPR and other relevant regulatory requirements.
• Demonstrated experience developing, implementing and continuously improving risk management and compliance frameworks.
• Experience leading or coordinating external audits, certifications and assurance activities.
• Strong understanding of governance practices, risk management methodologies and compliance obligations.
• Excellent communication skills, with the ability to influence and engage stakeholders from operational teams through to Executive and Board level.
• Proven ability to translate complex risk and compliance requirements into practical business solutions.
• Strong project management and organisational skills, with the ability to juggle competing priorities and deliver outcomes in a dynamic environment.
• A highly collaborative approach and the ability to build trusted relationships across a diverse range of stakeholders.
• Experience responding to security, privacy or compliance incidents would be highly regarded.
• A continuous improvement mindset and a genuine passion for creating secure, resilient organisations.
• Comfortable rolling up your sleeves, adapting to change and contributing wherever needed to support the wider DEFEND business.

Benefits

Our dream at DEFEND is to improve everyday life by creating a cyber resilient world. Over the last few years, we've experienced phenomenal growth, working with a wide variety of customers and winning several industry awards, including Microsoft's Global Partner of the Year for 2025!

Why DEFEND?

We believe in investing in our employees’ growth and providing them with opportunities to advance their skills and careers. We offer a collaborative workplace culture, and we are committed to fostering an inclusive environment where innovative thinking is encouraged.

By joining our innovative and creative team you will have the opportunity to contribute a variety of cybersecurity outcomes, from culture & awareness of cyber resilience, through to offensive & defensive security. No matter what your role, everyone at DEFEND contributes towards our dream of creating a cyber resilient world.

The benefits of working at DEFEND

In addition to working for a growing, dynamic NZ company, DEFEND offers the following benefits to all our DEFENDers

• 3.5% Kiwisaver on top of your base salary
• Southern Cross Health Insurance coverage
• Mobile and Broadband discounts for yourself and family
• Flexible, hybrid work environment
• An allowance to contribute to your home office setup
• Access to EAP services to support you across a range of wellbeing needs

Diversity & Inclusion:

At DEFEND, we celebrate a variety of perspectives and experiences. We know from experience that people from underrepresented groups often don’t apply for roles they don’t feel they meet all the criteria for. We’re committed to creating an environment that enables all our team to thrive. If you think you have what it takes, but don’t check every single box, please consider applying. We’d love to hear how you might contribute to the team and being our next DEFENDer.