ICT Risk & Assurance Leader for Critical Infrastructure

CGR Services; Auckland; Hybrid; NZD 150,000 - 210,000; Full time

Job summary

Transpower NZ is seeking an ICT Risk and Assurance Manager to lead governance across IT, OT, cloud and third‑party environments, shaping an integrated GRC capability for the future. You’ll connect cyber risks, assurance findings and resilience outcomes for senior leaders and governance forums, driving evidence-based decisions and regulatory readiness.

The role sits at the centre of critical infrastructure, with a strong emphasis on risk management, incident response post‑event reviews and

Qualifications

• 5+ years in cyber / ICT risk and governance.
• Experience developing risk and assurance frameworks.
• Experience with regulatory compliance and evidence-based reporting.
• Strong IT and OT security understanding.
• tertiary qualification in Cyber Security, Information Security, CS, Engineering or Risk Management.

Responsibilities

• Develop ICT security risk, assurance and governance frameworks.
• Develop bowtie-based risk models for ICT systems and services, including IT, OT, cloud and third-party environments.
• Lead assurance programmes that assess risk, control effectiveness, compliance obligations and resilience outcomes.
• Provide reporting on ICT risk, security controls, resilience and compliance to senior management, governance forums and executive leaders.
• Coordinate internal and external assurance activity, including audits, regulatory reviews, security assessments and control validation.
• Prepare for evolving critical infrastructure regulation through readiness assessments, evidence, engagement and practical implementation planning.
• Connect control effectiveness, operational evidence and security investment into a coherent view of cyber resilience.
• Support security incident post-event reviews and identifying systemic improvements and assurance outcomes.
• Build ICT risk and assurance capability across Transpower through practical tools, coaching, workshops and shared learning.
• Contribute to sector discussions, regulatory consultations and critical infrastructure security initiatives.

Skills

ICT risk

Cyber risk

Governance

Audit

Regulatory compliance

Education

Bachelor's degree in Cyber Security / Information Security / related field

Job description

Transpower NZ is seeking an ICT Risk and Assurance Manager to lead governance across IT, OT, cloud and third‑party environments, shaping an integrated GRC capability for the future. You’ll connect cyber risks, assurance findings and resilience outcomes for senior leaders and governance forums, driving evidence-based decisions and regulatory readiness.

The role sits at the centre of critical infrastructure, with a strong emphasis on risk management, incident response post‑event reviews and