Information Security Manager

CGR Services; Christchurch; On-site; NZD 140,000 - 180,000; Full time

Job summary

Orion Group seeks an Information Security Manager to own information and cyber security across corporate and OT environments, translating complex risk into clear actions for engineers, project teams and executives.

You will set direction and mature security, embedding governance, risk and compliance across projects, technology changes and operations while partnering with internal and external stakeholders to address emerging threats.

Qualifications

• Strong information or cyber security experience, including leadership within a security environment.
• Ability to build relationships and influence across technical teams, leaders, suppliers and partners.
• Solid grounding in governance, risk, compliance, strategy and control frameworks.
• Practical knowledge of ISO 27001, NIST CSF, AESCSF and NZISM.
• Experience across security operations, incident response, vulnerability management and assurance.

Responsibilities

• Own and evolve information security strategy, roadmap, policies, standards and governance.
• Lead cyber risk, assurance and compliance, prioritising and managing risks.
• Oversee security operations across corporate and OT environments (threat detection, vulnerabilities, access).
• Own the incident response framework and guide the organisation through significant events.
• Collaborate with OT teams to strengthen security across OT and ICS environments.
• Embed security into projects, changes and processes from the outset.
• Monitor emerging threats and continuously evolve the security posture.

Skills

Cyber security leadership

Risk management

Incident response

OT security

Cloud/Hybrid security

Stakeholder influence

Job description

Cyber security is always important but when the systems you're protecting underpin essential services for the community, it takes on a whole new level of importance. We're looking for an Information Security Manager to take ownership of our information and cyber security function, leading cyber across the Orion Group and working across both our corporate and OT environments. This is a role with genuine breadth, setting the direction, understanding where our risks sit, strengthening our security maturity and making sure security works in the real world - not just on paper. You'll be our security expert, but just as importantly, you'll be someone people want to involve early. Someone who can take a complex cyber risk and turn it into a conversation that makes sense to an engineer, a project team or at executive level.

About us

Passionate, curious, and innovative are a few words that describe our people. We are powering the future, connecting communities, and igniting innovation. Orion owns and operates the electricity distribution network that provides power to central Canterbury. As the third largest electricity distribution network in New Zealand, we cover remote rural areas, regional towns, and the city of Christchurch. We are an essential service and take our responsibilities seriously. We are community owned and working here means a career with meaning and purpose that makes a difference in your very own neighbourhood.

The role

• Own and evolve our information security strategy, roadmap, policies, standards and governance framework
• Lead our approach to cyber risk, assurance and compliance, ensuring risks are understood, prioritised and actively managed
• Oversee security operations across corporate and OT environments, including threat detection, vulnerability and access management
• Own our security incident response framework and lead the organisation through significant security events if and when they occur
• Work closely with our OT teams to strengthen security across operational technology and industrial control environments
• Build security into projects, technology change and operational processes from the outset rather than adding it at the end
• Keep an eye firmly on what's coming next - emerging threats, vulnerabilities and technologies - and continue evolving our security posture accordingly

About you

You know your way around cyber security, but your value goes beyond knowing the frameworks. You can challenge constructively, make sound risk-based decisions and explain the why behind security requirements rather than simply saying no.

• Strong information or cyber security experience, including experience taking ownership or providing leadership within a security environment
• Ability to build strong relationships and influence people across technical teams, senior leaders, suppliers and external partners
• A solid grounding in security governance, risk, compliance, strategy and control frameworks
• Practical knowledge of frameworks such as ISO 27001, NIST CSF, AESCSF and NZISM
• Experience across security operations, incident response, vulnerability management and security assurance
• Experience securing operational technology (OT) environments, including an understanding of how OT differs from IT in risk, priorities and controls
• An understanding of security architecture across on-premise, cloud and hybrid environments
• Curiosity and a continuous improvement mindset - cyber security doesn't stand still, and neither should our approach

We offer

You'll find at Orion, you can come as you are and just be you. You will be joining a workplace that values who you are, the work you do, and the way you think. Importantly, we offer:

• Flexible working arrangements, and flexible locations with our Head office in Burnside and satellite offices in Rolleston and Ferrymead
• Three days of “My Days” leave
• A broad range of workplace benefits from a wellbeing allowance to access to our holiday house in Hanmer!

We are truly committed to diversity, inclusion and lifting our cultural capability.

Please reach out to us with any questions at [e-mail].

You must have the right to live and work in New Zealand to apply for this job.

Pre-employment checks are part of our recruitment process.