Principal Cyber Risk Advisor for Protective Security

New Zealand Transport Agency; Wellington; On-site; NZD 140,000 - 190,000; Full time

Benefits offered by this job

Flexible working arrangements

Five weeks annual leave

Income protection and critical illness

Professional development

Collaborative culture

Job summary

New Zealand Transport Agency (NZTA) is seeking a Principal Protective Security Risk Advisor – Cyber to strengthen cyber risk capability across critical services. You will lead complex risk assessments, guide secure-by-design outcomes, and influence certification and accreditation activities within NZTA's Protective Security Risk team.

You will partner with project, business and technical teams to deliver resilient services and informed risk treatments while using AI-assisted methodologies to

Qualifications

• Experienced cyber security risk assessment practitioner
• Familiar with PSR, NZISM, ISO 31000
• Ability to articulate cyber risk findings and practical treatments
• Experience using AI-assisted workflows for risk assessment

Responsibilities

• Lead cyber security risk assessments across NZTA systems and services
• Provide expert advice using PSR, NZISM and ISO 31000
• Produce risk evaluation artefacts and security control recommendations
• Define risk-proportionate security controls for secure outcomes
• Present cyber security risks to governance forums
• Support accreditation outcomes and certification activities
• Strengthen cyber security control capability across NZTA through leadership

Skills

Cyber risk assessment

Expert advice

Stakeholder engagement

AI-assisted risk

GRC tooling

Tools

PSR

NZISM

ISO 31000

Job description

New Zealand Transport Agency (NZTA) is seeking a Principal Protective Security Risk Advisor – Cyber to strengthen cyber risk capability across critical services. You will lead complex risk assessments, guide secure-by-design outcomes, and influence certification and accreditation activities within NZTA's Protective Security Risk team.

You will partner with project, business and technical teams to deliver resilient services and informed risk treatments while using AI-assisted methodologies to