Principal Advisor Security Assurance

Marketplace; Auckland; On-site; NZD 120,000 - 180,000; Full time

Benefits offered by this job

Five weeks' annual leave

Income protection and critical illness

Job summary

New Zealand Transport Agency (NZTA) seeks a Principal Advisor Security Assurance to deliver independent, evidence-based assessments of critical security controls across our people, information, technology and third-party environments. You will lead end-to-end assurance activities and report findings to governance across a national, complex digital landscape.

A proven background in security assurance, audits or risk is required, with NZISM/PSR knowledge and professional certifications, and the

Qualifications

• Experience conducting independent security assurance, control testing or audits in large/complex organisations.
• Knowledge of security controls across cyber/technical/protective security domains.
• Familiarity with NZISM and PSR; ability to apply frameworks and evidence gathering.

Responsibilities

• Lead independent security assurance assessments from planning through reporting.
• Evaluate design and operating effectiveness of security controls.
• Gather and assess evidence through testing, observation and stakeholder engagement.
• Identify control weaknesses, risk exposures and improvement opportunities.
• Validate remediation activities and confirm effective risk treatments.
• Produce clear, evidence-based findings and recommendations for governance reporting.
• Conduct assurance activities across third-party and supply chain environments.
• Contribute to development of security policies, standards and control frameworks.

Skills

Security assurance

Independent testing

Stakeholder engagement

Risk assessment

Evidence-based findings

Education

Information security degree

CISA/CISSP or equivalent

Tools

NZISM

PSR (Protective Security Requirements)

Job description

# Principal Advisor Security Assurance at New Zealand Transport Agency, Auckland## Mō tēnei tūranga mahi | About this role* Lead independent security assurance across NZTA's critical controls* Apply expert judgement to assess enterprise security risk and effectiveness* Influence assurance outcomes across a complex national environment* Location: Auckland, Hamilton, Wellington, Palmerston North or ChristchurchThis is a rare opportunity to join NZ Transport Agency | Waka Kotahi (NZTA) as we strengthen our Security Assurance capability, providing independent assurance that critical security controls are operating effectively across one of New Zealand's largest and most complex digital environments. **Te Whiwhinga mahi | The opportunity** We're looking for an experienced security assurance professional to join NZTA as a **Principal Advisor Security Assurance**. This senior specialist role is responsible for delivering independent, evidence-based assurance assessments that provide confidence in the effectiveness of security controls across NZTA's people, information, technology and third-party environments. As Principal Advisor Security Assurance, you'll conduct end-to-end assurance activities across assigned domains, applying expert judgement and established methodologies to test and validate the design and operating effectiveness of security controls. Your work will help ensure NZTA has a clear and accurate understanding of security risk exposure and control performance across critical services and systems. Working closely with the Manager Security Assurance, Lead Assurance Advisors, security stakeholders and technology leaders, you'll provide independent assurance insights that support informed decision-making and continuous improvement of NZTA's security posture. You will:* Lead independent security assurance assessments from planning through to reporting* Evaluate the design and operating effectiveness of security controls* Gather and assess evidence through testing, observation and stakeholder engagement* Identify control weaknesses, risk exposures and opportunities for improvement* Validate security remediation activities and confirm risk treatments are effective* Produce clear, evidence-based findings and recommendations for governance reporting* Conduct assurance activities across third-party and supply chain environments* Contribute to the ongoing improvement of security assurance methodologies and practices* Support the development of security policies, standards and control frameworks through assurance insights.You will find out more about the role here - Position Description **Ko koe tēnei | About you** You'll be an experienced security assurance, audit or risk professional with strong technical knowledge, sound judgement and the ability to assess complex security controls objectively and independently. You'll be comfortable working across technical and business environments, gathering evidence, analysing risk and providing trusted advice that stands up to scrutiny. To be successful in this role, you will bring:* Experience conducting independent security assurance, control effectiveness testing or security audits within large or complex organisations* Strong understanding of security controls across cyber, technical or protective security domains* Knowledge of NZISM, Protective Security Requirements (PSR) and relevant security frameworks* Experience gathering and evaluating evidence through testing, observation and documentation review* Strong analytical and report writing skills, producing evidence-based findings and recommendations* The ability to maintain professional independence and provide objective assurance conclusions* Experience assessing security controls within supplier, outsourced or third-party environments* Strong stakeholder engagement skills and the ability to communicate findings clearly and effectively.Relevant tertiary qualifications in information security, audit, risk management or a related discipline, together with professional certifications such as CISA, CISSP or equivalent, would be advantageous. The successful candidate must be able to achieve and maintain a New Zealand Government security clearance up to and including SECRET. You will demonstrate knowledge of, or a willingness to gain an understanding of, Te Ao Māori and promote tikanga and Te Reo Māori. You will also have knowledge of, or a willingness to gain an appreciation of, Te Tiriti o Waitangi as it applies in the public sector. **Mō mātou | About us** Te Aukaha | Digital provides modern, fit-for-purpose digital, information and technology solutions that support decision-making and make it easier for our people, partners and customers to work with us. Our Security team enables NZTA to safely deliver its outcomes by reducing enterprise security risk across our people, places, information and technology. **Ka whiwhi koe i te aha | What you will get in return** This is an opportunity to influence security assurance outcomes across a nationally significant organisation and help ensure NZTA's security controls are operating effectively across critical services, platforms and supplier environments. You'll work alongside experienced security professionals, contribute to enterprise risk management and play a key role in strengthening NZTA's security assurance capability. In addition, you'll benefit from:* Five weeks' annual leave* Income protection and critical illness insurance for permanent employees* Flexible working arrangements, where appropriate for the role* Opportunities for professional development and continued learningReady to apply your security assurance expertise in a role with national impact? We'd love to hear from you. **Me pēhea te tuku tono | How to apply** Please click Apply to upload your CV and cover letter detailing your suitability for the role.**Rā Katinga | Applications close**26 November 2026For further information, email: [e-mail] be considered for this position you must have a legal right to live and work in New Zealand.NZTA| Waka Kotahi is an equal opportunity employer (EOE). We recognise the importance of diversity and inclusion and are committed to providing a working environment that embraces these values. Please let us know if you need any support or have any access requirements that will help you through the recruitment process.Please note that we may begin shortlisting as we receive applications. We encourage early applications as we may withdraw the advertising at any time.## Ngā taipitopito tūranga mahi | Job details| | || --- | --- || Employer: | New Zealand Transport Agency || Location: | Auckland || Position type: | Ongoing - Full Time || Category: | IT & computing || Date listed: | 13-Nov-2026 || Salary range: | N/A || Closing date: | 26-Nov-2026 || Reference: | JR-0000013833\\_1794516934 || Attachment: | No File Attached || File links: | || Website: | http://www.nzta.govt.nz/ |Note: You may be redirected to the employer's careers website.