Manager Security Assurance

New Zealand Government; Hamilton; Hybrid; NZD 150,000 - 190,000; Full time

Benefits offered by this job

Five weeks' annual leave

Income protection

Critical illness insurance

Flexible working arrangements

Professional development

Job summary

NZ Transport Agency (Waka Kotahi) seeks an experienced security assurance leader to head the independent assurance function for the organisation. You will manage a team of specialists, define scope and methodology, and provide evidence‑based security position reporting to executives and the Board.

You will ensure risk treatments are closed, engage with auditors, and maintain escalation rights to the CISO and Board audit and risk processes.

Qualifications

• Senior level experience leading independent security assurance, audit or control functions.
• Ability to influence at senior levels and escalate when findings aren’t actioned.
• Experience with third‑party/outsourced environments and NZISM/PSR knowledge.

Responsibilities

• Lead the security assurance team and budget.
• Own the enterprise assurance programme and methodology.
• Test design and operating effectiveness of security controls.
• Report assurance outcomes to the CISO, leadership team and Board.

Skills

Security assurance leadership

Audit leadership

Risk management

Communicating with executives

Education

Tertiary qualification

Certifications: CISA / CISSP / CRISC / CISM

Tools

GRC tooling

Job description

Lead NZTA's independent security assurance function and a team of fiveDirect escalation line to the CISO and Board, unfilteredTest whether controls actually work, not just whether they existLocation: Auckland, Hamilton or WellingtonTe Whiwhinga mahi | The opportunityWe're looking for an experienced security assurance professional to lead NZ Transport Agency Waka Kotahi's (NZTA) independent Security Assurance function and a team of five specialists.As Manager Security Assurance, you will provide executive leaders, governance forums and external stakeholders with confidence that security risks are understood, managed and transparently reported.You'll own the enterprise assurance programme, test whether our cyber and protective security controls actually work and give executives, the Board and external oversight bodies evidence-based confidence in our security position. That covers our own systems and the third parties we rely on.The role is genuinely independent. You'll set the assurance scope, method and conclusions, with direct escalation rights to the CISO and Board audit and risk processes. As a member of the Security Leadership Team you'll bring that independent perspective to our security strategy and investment decisions.Key responsibilities include:Lead, develop and manage the assurance team and budgetOwn and continuously improve NZTA's enterprise security assurance programme and methodologyTest the design and operating effectiveness of cyber and protective security controlsValidate that risk treatments are actually closed, not just reported as closedIdentify systemic control weaknesses and escalate material findings with optionsReport independently to the CISO, Digital Leadership Team and Board audit and risk processesLead engagement with auditors and other oversight bodiesYou will find out more about the role here: Position DescriptionKo koe tenei | About youYou will be an accomplished security assurance, audit or risk leader with experience operating in a large and complex environment, bringing credibility, sound judgement and the ability to influence at senior levels.To be successful in this role, you will bring:Significant experience leading independent security assurance, audit or control effectiveness functions in a large, complex organisationExpertise assessing cyber and protective security controls including in third-party and outsourced environmentsStrong knowledge of NZISM and PSR applied through assurance rather than complianceA track record of presenting assurance outcomes to executives, Boards and audit committeesThe confidence to hold an independent position and escalate when findings aren't actionedExperience leading and developing specialist assurance teamsWorking knowledge of GRC and assurance toolingA relevant tertiary qualification or equivalent experience. Certifications such as CISA, CISSP, CRISC or CISM held or being pursuedPlease note: You must be able to achieve and maintain a New Zealand national security clearance up to and including SECRET.You will demonstrate knowledge of, or a willingness to gain an understanding of, Te Ao Maori and promote tikanga and Te Reo Maori. You will also have knowledge of, or a willingness to gain an appreciation of, Te Tiriti o Waitangi as it applies in the public sector.Mo matou | About usTe Aukaha | Digital provides modern, fit-for-purpose digital, information and technology solutions that support decision-making and make it easier for our people, partners and customers to work with us.Our Security team enables NZTA to safely deliver its outcomes by reducing enterprise security risk across our people, places, information and technology.Security Assurance provides independent assurance over the design, implementation and operation of the security controls NZTA relies on under the Protective Security Requirements. Coverage is planned on risk, conclusions aren't subject to direction from any other function and we're already using AI-assisted automation to make assurance faster and more evidence-driven.Ka whiwhi koe i te aha | What you will get in returnThis is an opportunity to build and lead a critical enterprise assurance function that helps shape security outcomes across a complex, nationally significant organisation.In addition, you'll benefit from:Five weeks' annual leaveIncome protection and critical illness insurance for permanent employeesFlexible working arrangements, where appropriate for the roleOpportunities for professional development and continued learningReady to take the next step in your security leadership career? We would love to hear from you.Me pehea te tuku tono | How to applyPlease click Apply to upload your CV and cover letter detailing your suitability for the role.Ra Katinga | Applications close18 November 2026For further information, email: [e-mail] be considered for this position you must have a legal right to live and work in New Zealand.NZTA| Waka Kotahi is an equal opportunity employer (EOE). We recognise the importance of diversity and inclusion and are committed to providing a working environment that embraces these values. Please let us know if you need any support or have any access requirements that will help you through the recruitment process.Please note that we may begin shortlisting as we receive applications. We encourage early applications as we may withdraw the advertising at any time.