ICT Risk and Assurance Lead

Marketplace; Wellington; Ibrido; NZD 140.000 - 190.000; Tempo pieno

Descrizione del lavoro

Transpower New Zealand Limited in Wellington is seeking an ICT risk and assurance practitioner to lead risk assessments, assurance activities and reporting across IT, OT and cloud environments.

The role combines hands-on delivery with governance, requires strong communication and stakeholder engagement, and offers influence across senior leadership to strengthen resilience of critical infrastructure.

Competenze

• At least five years’ experience in ICT security, risk, assurance, audit or governance.
• Experience delivering risk assessments, assurance reviews and security control assessments.
• Ability to translate complex security issues into clear business guidance.
• Relevant tertiary qualification in computer science, cyber security, information security, engineering or risk management.

Mansioni

• Provide leadership and SME on ICT risk, governance and assurance.
• Manage the assurance schedule and track findings to closure.
• Develop bowtie-based risk models with semi-quantified analysis.
• Prepare executive reporting on risk exposure, control effectiveness, compliance and resilience.
• Develop and maintain ICT risk management policies and standards; liaise with regulators.

Conoscenze

Communication skills

Stakeholder influence

Risk governance

Critical thinking

Formazione

Tertiary qualification in IT or security

Descrizione del lavoro

# ICT Risk and Assurance Lead at Transpower New Zealand Limited, Wellington## Mō tēnei tūranga mahi | About this role* Assure IT, OT and cloud environments through astute risk assessments* Manage our assurance schedule to ensure high-quality, comprehensive delivery* Influence senior leaders and strengthen critical infrastructure resilience*Bring your expertise to a hands-on role helping shape Transpower’s ICT risk and assurance practice alongside technical leaders and risk practitioners*Transpower owns and operates New Zealand’s National Grid and, as System Operator, manages the real-time operation of the electricity system. Our purpose is to empower the energy future for New Zealand – enabling a net-zero carbon economy and a reliable, secure electricity system.**About the team**Our Security Services team sits within Information Services and Technology (IST), helping protect the technology, identities and services that support Transpower’s critical operations. Working across information technology (IT), operational technology (OT) and cloud environments, the team brings together security operations, architecture and design, identity and access management, and risk and assurance expertise.**About the opportunity**With our incumbent retiring, we are looking for an experienced ICT risk and assurance practitioner who enjoys doing the work as well as improving how it’s done. As our ICT Risk & Assurance Manager, you’ll manage and personally deliver risk assessments, assurance activities and reporting, while providing practical thought/technical leadership across ICT risk, assurance, resilience and governance.Reporting to the Head of Security Services within IST, you’ll also work closely with Transpower’s Head of Risk and Assurance. Through evidence-based assurance and constructive challenge, you’ll help leaders understand ICT risks, help make informed investment decisions and gain confidence that security controls deliver the intended protection.You’ll collaborate with security specialists, technology and delivery teams, Enterprise Risk, Legal and Privacy, and business leaders. Beyond Transpower, you’ll engage with auditors, assessors, regulators, and industry partners.**Hands-on work will include:*** Providing leadership and subject matter expertise on ICT risk, governance and assurance matters, and building risk and assurance capability across Transpower as part of a group of practitioners across the organisation.* Managing the assurance schedule and facilitating regular reviews of the effectiveness of risk controls, tracking findings to ensure agreed actions are completed on time and to quality.* Developing and maintaining bowtie-based risk models with a Semi-Quantified Risk Analysis approach to defining risk levels.* Preparing executive reporting on risk exposure, control effectiveness, compliance and resilience.* Developing and maintaining policies and standards for ICT risk management, providing compliance advice to management and delivery teams, and preparing Transpower for cybersecurity regulation by supporting engagement with regulators and government agencies.Combine your technical credibility with business judgement, to influence how ICT risk is understood and managed across nationally significant infrastructure.**What will you bring?**Outstanding communication skills (both verbal and written) curiosity, sound judgement, and the confidence to ask constructive questions. Comfortable moving between technical detail and the bigger picture, you can translate complex security issues into clear business advice and recommendations.Your collaborative approach helps you build trust, influence senior stakeholders, manage expectations, and strengthen risk ownership without losing sight of operational realities.**Your CV and cover letter will demonstrate:*** At least five years’ experience in ICT security, risk, assurance, audit or governance, including developing and operating ICT risk and assurance frameworks.* Sound understanding of ICT security environments and the implications of security risks for critical services.* Experience in regulatory compliance, assurance reviews and security control assessments.* Demonstrated ability to support delivery teams at an operational level and senior leaders as a trusted adviser, providing clear reporting, practical advice and effective stakeholder engagement.* A relevant tertiary qualification e.g. computer science, cyber security, information security, engineering, risk management or similarIdeally, you will have worked in a large corporate or government organisation in an operational role combining hands-on delivery with risk and assurance leadership. Experience in critical infrastructure or utilities would be advantageous, as would familiarity with NIST, ISO 27001, CIS Controls or IEC 62443.**Join us at Transpower!**Our people care deeply about each other and New Zealand. With more than thirty-one ethnicities represented across Transpower, our diverse perspectives, knowledge and experience are willingly shared.We work in the office or on-site for a minimum of three days each week to support relationships, learning and delivery, with adaptable daily start and finish times. We prioritise wellbeing through a range of employee health and wellness benefits – check them out here: https://www.transpower.co.nz/about-us/careers-transpower/staff-benefits**Next steps**If you enjoy making complex risks understandable and turning assurance into meaningful improvement, we’d love to hear from you. Please review the position description and apply with your CV and cover letter outlining your interest and specific relevant experience.**Applications close Monday 16 November.** However, applications will be reviewed as they are received, and we may contact you for an exploratory conversation ahead of the closing date. A handover with our knowledgeable incumbent is planned for January.Wellington is the preferred location for this role however Hamilton may be considered depending on your experience, communication and influencing skills.*Existing eligibility to work in New Zealand is essential.*## Ngā taipitopito tūranga mahi | Job details| | || --- | --- || Employer: | Transpower New Zealand Limited || Location: | Wellington || Position type: | Ongoing - Full Time || Category: | IT & computing || Date listed: | 30-Oct-2026 || Salary range: | N/A || Closing date: | 16-Nov-2026 || Reference: | 39882-2 || Attachment: | || File links: | pd - risk and assurance manager - ist.pdf || Website: | https://careers.transpower.co.nz/ |Note: You may be redirected to the employer's careers website.