Information Security Manager

Comspek International; Auckland; On-site; NZD 125,000 - 150,000; Full time

Job summary

A technology and security services firm is seeking an experienced Information Security Manager in Auckland. This pivotal role involves ensuring operational delivery of information security activities and compliance with security standards. Candidates should have over 5 years of experience in information security, with strong knowledge of security frameworks like NIST and ISO 27001. The firm promotes a supportive, inclusive environment, encouraging diverse hiring practices.

Qualifications

• 5+ years’ experience in information security or related roles.
• Solid knowledge of information security standards and frameworks.
• Experience in incident response and recovery efforts.

Responsibilities

• Implement and improve information security controls, policies, and procedures.
• Ensure compliance with security standards and maintain incident readiness.

Skills

Information security experience

Knowledge of security frameworks (NIST, ISO 27001)

Vulnerability management

Endpoint protection

Stakeholder engagement

Tools

Protecht

SIEM platforms

Job description

Overview

Information Security Manager

At Kordia, our mission is simple. To build connections you can trust, that make our digital world more secure, reliable and resilient. We have the leading team in the industry, experienced professionals who work alongside our customers to grow their business – whatever and wherever it is. Now, we’re looking for a forward-thinking Information Security Manager to help us lead our next digital evolution. This is a pivotal leadership role where you’ll be responsible for operational delivery of Kordia’s information security activities, implementing security controls, raising awareness, and managing day-to-day cyber risk in alignment with Kordia’s cyber security strategy. This position plays a key role in ensuring alignment with enterprise-wide cyber security strategy and risk appetite.

Responsibilities

• Have end-to-end accountability for implementing, maintaining, and continuously improving information security controls, policies, and procedures, as defined by the cyber security strategy and in alignment with the vCISO’s direction.
• Be responsible for operationalising security requirements, maintaining incident readiness, and ensuring compliance with relevant standards and obligations.

Qualifications

• 5+ years’ experience in information security, IT operations, or related roles with a focus on hands-on delivery of security controls.
• Solid working knowledge of information security standards and frameworks, including NIST, ISO 27001, NZISM, and CERT/NCSC guidance.
• Familiarity with key security operations functions such as vulnerability management, endpoint protection, access controls, and security monitoring.
• Proven ability to lead awareness campaigns and influence secure behaviour across all levels of an organisation.
• Experience coordinating incident response and recovery efforts, including post-incident review and reporting.
• Strong stakeholder engagement skills and the ability to collaborate effectively with internal IT teams, vendors, and risk functions.
• High attention to detail with a structured, proactive approach to problem-solving and documentation.
• Comfortable using digital tools such as Protecht, SIEM platforms, and asset management systems to support delivery and reporting.

Environment & Diversity

At Kordia, you’ll join a supportive, future-focused environment where innovation and continuous improvement are part of the culture.

Kia ora, Comspek and our clients fully support and encourage diverse hiring and inclusive recruitment processes. Don’t meet every single requirement of this job description? That’s ok – You do not need to tick every box or have expertise in the full JD. Comspek is dedicated to building diverse, inclusive and authentic workplaces based on different clients’ needs. So, if you’re excited about this role, we encourage you to apply.