Head of Information Security & Cyber Resilience

Medical Assurance Society NZ; Wellington; On-site; NZD 180,000 - 260,000; Full time

Benefits offered by this job

Health and Life Insurance

KiwiSaver 6%

Job summary

Medical Assurance Society NZ in Wellington seeks a Head of Information Security to shape our cyber security, information protection and resilience capability. You will lead the security function, partner with executives, and uplift security maturity across MAS to enable growth and trusted member outcomes.

Reporting to the CTO, you’ll build a small team, drive enterprise-wide security governance, and oversee cloud security, data protection and risk management in a hybrid NZ environment.

Qualifications

• Significant experience in information security, cyber security, technology risk or security leadership roles.
• Experience working within complex organisations, ideally in financial services, technology, SaaS, telecommunications, government or other regulated environments.
• Proven experience engaging with Executive teams, Boards and governance forums.
• Strong knowledge of security and governance frameworks such as NIST, ISO 27001 and SOC 2.
• Experience leading enterprise security strategy, governance and organisational uplift programmes.
• Strong understanding of information management, data protection, risk management and regulatory obligations.
• Experience managing third-party providers, supplier risk and security supply chain controls.
• Experience with cloud security including Azure and/or AWS.
• Outstanding communication and stakeholder management skills, with the ability to engage technical and non-technical audiences alike.
• The ability to operate strategically while remaining effective in operational delivery and execution.
• Willingness to travel as required.

Responsibilities

• Develop and deliver MAS's Security and Data Protection Strategy.
• Drive security maturity initiatives and foster a strong security culture across the organisation.
• Lead cyber resilience, security operations and incident response capability.
• Strengthen information management, data protection and data loss prevention practices.
• Establish security governance frameworks and provide security risk oversight, ensuring regulatory, legal and compliance obligations are effectively managed.
• Manage third-party, supplier and security supply chain risks, including oversight of external security providers and key technology partners.
• Support the secure adoption of cloud and emerging technologies, including AI.
• Provide trusted security advice and reporting to Executive and Board stakeholders.
• Lead and develop a small team while building security capability across the wider business.

Skills

Security leadership

Cyber security

Technology risk

Executive liaison

Governance knowledge

Job description

Medical Assurance Society NZ in Wellington seeks a Head of Information Security to shape our cyber security, information protection and resilience capability. You will lead the security function, partner with executives, and uplift security maturity across MAS to enable growth and trusted member outcomes.

Reporting to the CTO, you’ll build a small team, drive enterprise-wide security governance, and oversee cloud security, data protection and risk management in a hybrid NZ environment.