Manager Security Assurance

Waka Kotahi NZ Transport Agency; Wellington; On-site; NZD 180,000 - 230,000; Full time

Benefits offered by this job

Five weeks’ annual leave

Income protection and critical illness

Flexible working arrangements

Professional development and continued

Job summary

Waka Kotahi NZ Transport Agency invites an experienced security assurance leader to head the independent Security Assurance function. You will oversee a team of five, govern enterprise assurance, test control effectiveness, and report to the CISO, leadership team and Board committees.

You will manage the assurance scope, engage with auditors, and influence security strategy and investment decisions while maintaining independence and escalation rights.

Qualifications

• Experience leading independent security assurance or audit functions in a large organisation.
• Ability to assess cyber and protective security controls, including third parties.
• Knowledge of NZISM and Protective Security Requirements in assurance context.
• Proven track record presenting outcomes to executives and boards.
• Ability to maintain independence and escalate findings.
• Experience developing specialist assurance teams.
• Familiarity with GRC and assurance tooling.
• Relevant tertiary qualification or equivalent experience.
• Certifications in CISA/CISSP/CRISC/CISM or in progress.

Responsibilities

• Lead and develop the assurance team and budget.
• Own and improve the enterprise security assurance programme.
• Test design and operating effectiveness of controls.
• Validate close of risk treatments with evidence.
• Report to CISO, Digital Leadership Team and Board committees.
• Engage with auditors and oversight bodies.

Skills

Security leadership

Audits & governance

Risk assessment

Third-party risk

Executive reporting

GRC experience

Team leadership

Communication

Education

Tertiary qualification or equivalent

Certifications: CISA

Certifications: CISSP

Certifications: CRISC

Certifications: CISM

Tools

GRC software

Audit management tools

Assurance tooling

Job description

The opportunity

We’re looking for an experienced security assurance professional to lead NZ Transport Agency Waka Kotahi’s (NZTA) independent Security Assurance function and a team of five specialists. As Manager Security Assurance, you will provide executive leaders, governance forums and external stakeholders with confidence that security risks are understood, managed and transparently reported. You’ll own the enterprise assurance programme, test whether our cyber and protective security controls actually work and give executives, the Board and external oversight bodies evidence-based confidence in our security position. That covers our own systems and the third parties we rely on. The role is genuinely independent. You’ll set the assurance scope, method and conclusions, with direct escalation rights to the CISO and Board audit and risk processes. As a member of the Security Leadership Team you’ll bring that independent perspective to our security strategy and investment decisions.

Location: Auckland, Hamilton or Wellington

Key responsibilities include:

• Lead, develop and manage the assurance team and budget
• Own and continuously improve NZTA’s enterprise security assurance programme and methodology
• Test the design and operating effectiveness of cyber and protective security controls
• Validate that risk treatments are actually closed, not just reported as closed
• Identify systemic control weaknesses and escape material findings with options
• Report independently to the CISO, Digital Leadership Team and Board audit and risk processes
• Lead engagement with auditors and other oversight bodies

About you

• Significant experience leading independent security assurance, audit or control effectiveness functions in a large, complex organisation
• Expertise assessing cyber and protective security controls including in third-party and outsourced environments
• Strong knowledge of NZISM and PSR applied through assurance rather than compliance
• A track record of presenting assurance outcomes to executives, Boards and audit committees
• The confidence to hold an independent position and escape when findings aren’t actioned
• Experience leading and developing specialist assurance teams
• Working knowledge of GRC and assurance tooling
• A relevant tertiary qualification or equivalent experience.
• Certifications such as CISA, CISSP, CRISC or CISM held or being pursued
• You must be able to achieve and maintain a New Zealand national security clearance up to and including SECRET.
• You will demonstrate knowledge of, or a willingness to gain an understanding of, Te Ao Māori and promote tikanga and Te Reo Māori.
• You will also have knowledge of, or a willingness to gain an appreciation of, Te Tiriti o Waitangi as it applies in the public sector.

What you will get in return

• Five weeks’ annual leave
• Income protection and critical illness insurance for permanent employees
• Flexible working arrangements, where appropriate for the role
• Opportunities for professional development and continued learning

Applications close: 18 November 2026

For further information, email: [e-mail]

To be considered for this position you must have a legal right to live and work in New Zealand.

Waka Kotahi is an equal opportunity employer (EOE). We recognise the importance of diversity and inclusion and are committed to providing a working environment that embraces these values.

Please let us know if you need any support or have any access requirements that will help you through the recruitment process.

We encourage early applications as we may withdraw the advertising at any time.

Mō mātou | About us

Te Aukaha | Digital provides modern, fit-for-purpose digital, information and technology solutions that support decision-making and make it easier for our people, partners and customers to work with us. Our Security team enables NZTA to safely deliver its outcomes by reducing enterprise security risk across our people, places, information and technology. Security Assurance provides independent assurance over the design, implementation and operation of the security controls NZTA relies on under the Protective Security Requirements. Coverage is planned on risk, conclusions aren’t subject to direction from any other function and we’re already using AI-assisted automation to make assurance faster and more evidence-driven.

Ko wai mātou | About us

At Waka Kotahi NZ Transport Agency, it all starts with our people. The organisation's performance and success depends on the people who choose to make this a great place to work and make a difference for Aotearoa. Waka Kotahi has a strong future focus, understanding that new technologies and changing customer expectations mean the transport system we know today will not be the one we deliver in ten years time.