ICT Risk & Resilience Lead (IT/OT/Cloud)

New Zealand Government; Wellington; On-site; NZD 150,000 - 230,000; Full time

Job summary

Transpower is seeking an experienced Lead ICT risk, assurance and governance professional to strengthen resilience across IT, OT and cloud environments in Aotearoa New Zealand. You will connect risk, control performance and assurance findings to inform executive decisions and regulatory readiness.

The role sits in the ICT Security Services team and offers a rare opportunity to shape a future-facing GRC capability while collaborating with regulators, auditors and strategic partners.

Qualifications

• 5+ years' experience in cyber/ICT, risk, assurance, audit or governance functions.
• Demonstrated experience developing and operating cyber/ICT risk and assurance frameworks.
• Experience supporting senior leadership, executive-level governance and risk-based decision making.
• Experience with regulatory compliance, assurance activity, control assessments and evidence-based reporting.
• Strong understanding of IT and OT security environments, ideally including cloud and third-party technology risk.

Responsibilities

• Lead ICT risk, assurance and governance across IT, OT, cloud and third-party environments.
• Connect cyber risks, control performance, assurance findings and resilience outcomes for senior leaders and governance forums.
• Prepare for evolving critical infrastructure regulation through readiness assessments and evidence.
• Coordinate internal and external assurance activity including audits, regulatory reviews and control validation.
• Build ICT risk and assurance capability across Transpower through tools, coaching and workshops.

Skills

Cyber risk governance

Executive governance support

Risk management

Regulatory reporting

IT/OT security knowledge

Education

Relevant tertiary qualification in Cyber Security/Information Security/Computer Science/Engineering/Risk Management

Job description

Transpower is seeking an experienced Lead ICT risk, assurance and governance professional to strengthen resilience across IT, OT and cloud environments in Aotearoa New Zealand. You will connect risk, control performance and assurance findings to inform executive decisions and regulatory readiness.

The role sits in the ICT Security Services team and offers a rare opportunity to shape a future-facing GRC capability while collaborating with regulators, auditors and strategic partners.