Information Security Specialist

AMARU; Auckland; Hybrid; NZD 90,000 - 120,000; Full time

Job summary

AMARU is seeking an experienced Information Security Specialist to join our Auckland office. You will deliver information security consulting, identify risks, and implement controls to protect client data while guiding compliance with SOC 2, NIST CSF, ISO27001 or related standards.

You will collaborate with clients to develop effective security strategies, lead security transformation initiatives, and educate teams on best practices across cloud security and governance.

Qualifications

• Cloud security and infrastructure experience.
• Experience with IT security tools (SIEM, SOAR, WAF, EDR).
• Strong English communication and presentation skills.
• Experience implementing SOC 2, ISO27001 or NIST CSF.
• Relevant information security certifications (ISO 27001 Lead Implementer, CISSP, CISM, CRISC).
• 3+ years in information security consulting.
• Strong analytical and problem-solving abilities.

Responsibilities

• Conduct security assessments and risk analysis for clients.
• Develop and implement security strategies aligned with client objectives.
• Implement IT security tools for clients as part of security engineering.
• Lead information security transformation to achieve security compliance standards.
• Design security controls for zero-trust architecture.
• Conduct security audits to ensure regulatory compliance.
• Project manage penetration testing activities.
• Develop and deliver training programs on information security.
• Act as SME and provide guidance to clients and colleagues.
• Support AMARU’s security services at a global scale and operations.

Skills

Cloud security

Information security consulting

Risk analysis

Security controls

Security standards knowledge

Communication & presentation

Tools

SIEM

SOAR

WAF

DDoS protection

Encryption

EDR

Web Filtering

MDM

Job description

We are looking for an experienced Information Security Specialist to join us at our Auckland office. As an Information Security Specialist, you will be responsible for delivering a range of information security consulting services to our clients. You will work closely with clients to identify and assess security risks, develop effective security strategies and solutions, and implement security controls to protect their sensitive information. In addition, you will lead compliance with either SOC 2, NIST CSF, ISO27001 or relevant security standard requirements.

Why AMARU?

• We love simplifying and streamlining complex cyber security processes for our customers.
• In the last 4 years, we have managed to create a team that is kind, ambitious, loyal, dedicated, and where every member feels valued and motivated to perform better!
• We are New Zealand’s fastest-growing cyber security company, and incredibly grateful to work with over 70 brands across NZ, AU, Fiji and Switzerland.

What will you be responsible for?

• Conduct security assessments and risk analysis for clients to identify potential security risks and vulnerabilities.
• Develop and implement security strategies and solutions that align with client’s business objectives and meet their security requirements.
• Implement IT security tools for clients as part of security engineering.
• Lead the information security transformation to help clients achieve relevant security compliance standards.
• Design security controls to enable security transformation with zero-trust architecture principles.
• Conduct security audits to ensure compliance with regulatory requirements, industry best practices, NIST CSF and SOC 2 requirements.
• Project manage penetration testing activities and ensure that clients’ systems and applications are thoroughly tested for vulnerabilities.
• Develop and deliver training programs to educate clients on information security best practices.
• Act as a subject matter expert on information security and provide guidance and advice to clients and colleagues.
• Support the design and delivery of AMARU’s security services at a global scale.
• Support AMARU’s security operations services.

That’s the role, so who are you?

• Experience with cloud security and infrastructure.
• Experience with IT security tools like SIEM, SOAR, WAF, DDoS, Encryption solutions, EDR, Web Filtering and MDM.
• Fluent in English and must be confident in communicating with excellent presentation skills, and the ability to communicate complex security concepts to technical and non-technical audiences.
• Experience in implementing any of the following security standards: SOC 2, ISO 27001 and NIST CSF.
• Relevant information security certifications such as ISO 27001 Lead Implementer, CISSP, CISM, CRISC or others.
• 3+ years of experience in information security consulting, with a proven track record of successful project delivery.
• Strong analytical and problem-solving skills, with the ability to identify and assess security risks and develop cost-effective and practical solutions.

Please note: This is an on-site, Auckland-based role. It is essential for the applicant to have strong technical background with some governance, risk and compliance.