ICT Risk & Assurance Lead — Resilience & Governance

New Zealand Government; Wellington; Híbrido; NZD 120.000 - 180.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Staff wellbeing benefits

Flexible working

Descripción de la vacante

Transpower is seeking an experienced ICT Risk & Assurance Manager to lead risk assessments, assurance activities and reporting across ICT, OT and cloud environments. You'll influence senior leaders and shape resilience, governance and regulatory readiness in a critical national infrastructure context.

Reporting to the Head of Security Services, you'll build risk models, maintain assurance schedules, and deliver executive reporting while providing practical leadership to cross-functional teams

Formación

• At least five years’ experience in ICT security, risk, assurance, audit or governance, including developing and operating ICT risk and assurance frameworks.
• Sound understanding of ICT security environments and the implications of security risks for critical services.
• Experience in regulatory compliance, assurance reviews and security control assessments.
• Demonstrated ability to support delivery teams at an operational level and senior leaders as a trusted adviser, providing clear reporting, practical advice and effective stakeholder engagement.
• A relevant tertiary qualification e.g. computer science, cyber security, information security, engineering, risk management or similar.
• Ideally, you will have worked in a large corporate or government organisation in an operational role combining hands-on delivery with risk and assurance leadership. Experience in critical infrastructure or utilities would be advantageous, as would familiarity with NIST, ISO 27001, CIS Controls or IEC 62443.

Responsabilidades

• Providing leadership and subject matter expertise on ICT risk, governance and assurance matters, and building risk and assurance capability across Transpower as part of a group of practitioners across the organisation.
• Managing the assurance schedule and facilitating regular reviews of the effectiveness of risk controls, tracking findings to ensure agreed actions are completed on time and to quality.
• Developing and maintaining bowtie-based risk models with a Semi-Quantified Risk Analysis approach to defining risk levels.
• Preparing executive reporting on risk exposure, control effectiveness, compliance and resilience.
• Developing and maintaining policies and standards for ICT risk management, providing compliance advice to management and delivery teams, and preparing Transpower for cybersecurity regulation by supporting engagement with regulators and government agencies.

Conocimientos

ICT risk management

Stakeholder influence

Security governance

Regulatory understanding

Educación

Relevant tertiary qualification

Herramientas

NIST

ISO 27001

CIS Controls

IEC 62443

Descripción del empleo

Transpower is seeking an experienced ICT Risk & Assurance Manager to lead risk assessments, assurance activities and reporting across ICT, OT and cloud environments. You'll influence senior leaders and shape resilience, governance and regulatory readiness in a critical national infrastructure context.

Reporting to the Head of Security Services, you'll build risk models, maintain assurance schedules, and deliver executive reporting while providing practical leadership to cross-functional teams