ICT Risk & Assurance Leader for Critical Infrastructure

New Zealand Government; Wellington; Hybrid; NZD 120,000 - 180,000; Full time

Benefits offered by this job

Health and wellness benefits

On-site/office work model

Flexible start times

Job summary

Transpower is seeking an ICT Risk and Assurance Manager to lead security risk, assurance and governance across IT, OT, cloud and third‑party environments. You’ll connect cyber risks with evidence and resilience outcomes, providing clear reporting to senior management and governance forums.

You’ll collaborate with regulators, auditors and industry partners to shape practical, risk‑based responses and drive regulatory readiness across digital and operational systems that support New Zealand’s

Qualifications

• 5+ years’ experience in cyber/ICT, risk, assurance, audit or governance functions
• Experience developing and operating cyber/ICT risk and assurance frameworks
• Experience supporting senior leadership, executive governance and risk-based decision making
• Experience with regulatory compliance, assurance activity, control assessments and evidence-based reporting
• Strong understanding of IT and OT security environments, ideally including cloud/third-party risk
• A relevant tertiary qualification in Cyber Security, Information Security, Computer Science, Engineering, Risk Management or related discipline

Responsibilities

• Lead ICT risk, assurance and governance across IT, OT, cloud and third‑party environments
• Coordinate assurance activities, audits, regulatory reviews and control validation
• Provide reporting on ICT risk, security controls, resilience and compliance to senior management and governance forums
• Prepare readiness assessments and practical implementation planning for evolving critical infrastructure regulation
• Develop and share practical tools, coaching and workshops to build capability across Transpower
• Support regulators, auditors and industry partners in assurance and governance initiatives

Skills

ICT risk & governance

Cyber risk & assurance frameworks

Regulatory engagement

Stakeholder communication

Incident response & resilience

Education

Tertiary qualification in Cyber Security / Information Security / Computer Science / Engineering / Risk Management

Certifications (CRISC / CISA / SABSA / TOGAF) optional

Job description

Transpower is seeking an ICT Risk and Assurance Manager to lead security risk, assurance and governance across IT, OT, cloud and third‑party environments. You’ll connect cyber risks with evidence and resilience outcomes, providing clear reporting to senior management and governance forums.

You’ll collaborate with regulators, auditors and industry partners to shape practical, risk‑based responses and drive regulatory readiness across digital and operational systems that support New Zealand’s