Principal Cyber Risk Advisor – Protective Security

New Zealand Transport Agency; Auckland; On-site; NZD 110,000 - 170,000; Full time

Benefits offered by this job

Flexible work

Five weeks leave

Income protection

Professional development

Inclusive culture

Job summary

New Zealand Transport Agency (NZTA) seeks a Principal Protective Security Risk Advisor - Cyber to strengthen cyber risk capability across NZTA. You will lead complex risk assessments for critical services, guiding secure solutions through certification and accreditation, and influence governance with expert advice.

Based in Auckland, Wellington, Christchurch or Hamilton, you will drive secure-by-design outcomes and collaborate across business, project and technical teams to deliver resilient

Qualifications

• You're an experienced cyber security risk assessment practitioner who thrives in project teams and tackles complex IT services.
• Able to lead security risk assessments for a broad range information services.
• Experience using common risk assessment tools.
• Sound understanding of enterprise IT and cyber risks.
• Familiarity with conversational AI and structured prompts for security analysis.
• Familiarity with AI agents to create repeatable AI-assisted workflows.
• Expert judgement for evaluating cyber risk severity and likelihood based on exposure.
• Ability to articulate cyber risk findings clearly and recommend practical risk treatments.
• Excellent communication and time management skills.
• Proven ability to work effectively within teams and across business groups.
• Enthusiasm for learning and knowledge sharing.
• Industry security certifications such as CISSP, CRISC, CGRC or SABSA are preferred.

Responsibilities

• Lead cyber security risk assessments across critical NZTA systems and services.
• Provide expert advice using PSR, NZISM, ISO 31000 and industry best practice.
• Produce risk evaluation artefacts, including risk positions and security control recommendations.
• Define risk-proportionate security controls to support secure solution outcomes.
• Present cyber security risks and recommendations to governance forums.
• Use AI assisted Security Risk Assessment development methods to enhance efficiency and quality of risk identification and control identification while retaining oversight and accountability.
• Contribute with improvements for the use of GRC tooling for risk evaluations, including AI features.
• Partner with project, business and technical teams to achieve accreditation outcomes.
• Strengthen cyber security control capability across NZTA through leadership and influence.

Skills

Cyber security risk assessment

Leadership

Communication

AI-assisted workflows

Education

CISSP/CRISC/CGRC or SABSA preferred

Tools

GRC tooling

AI in risk analysis

Job description

New Zealand Transport Agency (NZTA) seeks a Principal Protective Security Risk Advisor - Cyber to strengthen cyber risk capability across NZTA. You will lead complex risk assessments for critical services, guiding secure solutions through certification and accreditation, and influence governance with expert advice.

Based in Auckland, Wellington, Christchurch or Hamilton, you will drive secure-by-design outcomes and collaborate across business, project and technical teams to deliver resilient