ISMS & GRC Security Analyst - ISO 27001

Tait Communications; Wellington; Hybrid; NZD 90,000 - 120,000; Full time

Benefits offered by this job

Health insurance

Free onsite parking

Gym and café facilities

Long service benefits

Social club

Job summary

Tait Communications is seeking an Information Security Analyst in Wellington to help integrate Vital and Tait New Zealand into the company’s ISMS and ISO/IEC 27001 certification programme. You’ll work with business leaders, security specialists, and the Global Information Security team to embed practical controls, support certification activities, and strengthen security practices across the organisation.

This role offers opportunities to influence risk management and governance while engaging

Qualifications

• Information security governance, risk and compliance experience is required.
• Experience in risk, compliance, governance, audit, project coordination, operations, or similar stakeholder-focused environments.
• Foundational knowledge of ICT and security concepts including cloud services, IAM, networks, applications, vulnerability management and incident response.

Responsibilities

• Coordinate security risk, compliance, assurance, and audit activities with evidence collection and remediation tracking.
• Partner with stakeholders to embed security controls, manage risks, and meet compliance obligations.
• Maintain security governance documentation, reporting, risk registers, and compliance metrics.
• Support customer, supplier, and project security assurance requirements and risk assessments.
• Act as the local information security liaison and promote security awareness.

Skills

Risk management

Governance

Stakeholder management

Communication

Incident response

Cloud concepts

Identity and access management

Education

(ISC)2 Certified in Cybersecurity (CC)

ISO/IEC 27001 qualification

Job description

Tait Communications is seeking an Information Security Analyst in Wellington to help integrate Vital and Tait New Zealand into the company’s ISMS and ISO/IEC 27001 certification programme. You’ll work with business leaders, security specialists, and the Global Information Security team to embed practical controls, support certification activities, and strengthen security practices across the organisation.

This role offers opportunities to influence risk management and governance while engaging