Principal Cyber Risk Advisor

Waka Kotahi NZ Transport Agency; Wellington; On-site; NZD 140,000 - 190,000; Full time

Benefits offered by this job

Flexible working

Five weeks annual leave

Income protection

Critical illness insurance

Professional development

Collaborative culture

Job summary

Waka Kotahi NZ Transport Agency seeks a Principal Protective Security Risk Advisor – Cyber to bolster its cyber risk capability and lead critical risk assessments across essential services. You will guide secure design through certification and accreditation, engaging with governance and project teams to deliver resilient transport systems.

Ideal candidates bring a strong cyber risk background, proficiency with risk assessment tools, and the ability to articulate findings clearly.

Qualifications

• Experience leading security risk assessments across broad information services.
• Familiarity with common risk assessment tools and frameworks.
• Strong understanding of enterprise IT and cyber risk exposure.
• Ability to use conversational AI and structured prompts for security analysis.
• Experience with AI-assisted workflows and repeatable security processes.

Responsibilities

• Lead cyber security risk assessments across critical NZTA systems and services.
• Provide expert advice using PSR, NZISM, ISO 31000 and industry best practices.
• Produce risk artefacts including risk positions and security control recommendations.
• Define risk-proportionate security controls for secure outcomes.
• Present cyber security risks and recommendations to governance forums.
• Leverage AI-assisted methods to improve risk identification and analysis.
• Contribute to improvements in GRC tooling for risk evaluations.
• Partner with project, business and technical teams to achieve accreditation outcomes.
• Strengthen cyber security control capability through leadership and influence.

Skills

Lead cyber risk assessments

Risk assessment tools

Enterprise IT cyber risks

Conversational AI prompts

AI-assisted workflows

Risk severity & likelihood judgement

Articulate cyber risk findings

Communication & time management

Team collaboration

Security certifications (CISSP/CRISC/S

Job description

Waka Kotahi NZ Transport Agency seeks a Principal Protective Security Risk Advisor – Cyber to bolster its cyber risk capability and lead critical risk assessments across essential services. You will guide secure design through certification and accreditation, engaging with governance and project teams to deliver resilient transport systems.

Ideal candidates bring a strong cyber risk background, proficiency with risk assessment tools, and the ability to articulate findings clearly.