Information Security Leader – IT & OT, Risk & Incident

CGR Services; Christchurch; On-site; NZD 140,000 - 180,000; Full time

Job summary

Orion Group seeks an Information Security Manager to own information and cyber security across corporate and OT environments, translating complex risk into clear actions for engineers, project teams and executives.

You will set direction and mature security, embedding governance, risk and compliance across projects, technology changes and operations while partnering with internal and external stakeholders to address emerging threats.

Qualifications

• Strong information or cyber security experience, including leadership within a security environment.
• Ability to build relationships and influence across technical teams, leaders, suppliers and partners.
• Solid grounding in governance, risk, compliance, strategy and control frameworks.
• Practical knowledge of ISO 27001, NIST CSF, AESCSF and NZISM.
• Experience across security operations, incident response, vulnerability management and assurance.

Responsibilities

• Own and evolve information security strategy, roadmap, policies, standards and governance.
• Lead cyber risk, assurance and compliance, prioritising and managing risks.
• Oversee security operations across corporate and OT environments (threat detection, vulnerabilities, access).
• Own the incident response framework and guide the organisation through significant events.
• Collaborate with OT teams to strengthen security across OT and ICS environments.
• Embed security into projects, changes and processes from the outset.
• Monitor emerging threats and continuously evolve the security posture.

Skills

Cyber security leadership

Risk management

Incident response

OT security

Cloud/Hybrid security

Stakeholder influence

Job description

Orion Group seeks an Information Security Manager to own information and cyber security across corporate and OT environments, translating complex risk into clear actions for engineers, project teams and executives.

You will set direction and mature security, embedding governance, risk and compliance across projects, technology changes and operations while partnering with internal and external stakeholders to address emerging threats.