Principal Cyber Risk Advisor - Protective Security Lead

NZ Transport Agency Waka Kotahi; Auckland; On-site; NZD 150,000 - 190,000; Full time

Benefits offered by this job

Flexible working

Five weeks annual leave

Income protection and critical illness

Professional development

Inclusive culture

Job summary

NZ Transport Agency | Waka Kotahi (NZTA) seeks a Principal Protective Security Risk Advisor - Cyber to uplift the agency’s protective security and cyber risk maturity. You will lead complex cyber risk assessments across critical services and guide secure-by-design outcomes.

You will provide expert advice using NZISM, ISO 31000 and related standards, produce risk artefacts, and influence governance through clear risk communication. CISSP/CRISC or similar certification is preferred.

Qualifications

• Extensive experience in cyber security risk assessment across critical IT services.
• Ability to lead risk assessments and prescribe controls within risk appetite.
• Familiarity with AI-assisted risk assessment approaches.
• Professional certifications preferred (CISSP, CRISC, CGRC or SABSA).

Responsibilities

• Lead cyber security risk assessments across critical NZTA systems and services.
• Provide expert advice using PSR, NZISM, ISO 31000 and industry best practice.
• Produce risk evaluation artefacts, including risk positions and security control recommendations.
• Define risk-proportionate security controls to support secure solution outcomes.
• Present cyber security risks and recommendations to governance forums.
• Use AI assisted Security Risk Assessment development methods to enhance efficiency and quality of risk identification, analysis and control identification.
• Contribute with improvements for the use of GRC tooling for risk evaluations, including evaluation of new AI features that enhance risk evaluation and management.
• Partner with project, business and technical teams to achieve accreditation outcomes.
• Strengthen cyber security control capability across NZTA through leadership and influence.

Skills

Cyber risk assessments

PSR & NZISM

ISO 31000

Risk evaluation

Stakeholder communication

AI-assisted workflows

Security governance

Team leadership

Job description

NZ Transport Agency | Waka Kotahi (NZTA) seeks a Principal Protective Security Risk Advisor - Cyber to uplift the agency’s protective security and cyber risk maturity. You will lead complex cyber risk assessments across critical services and guide secure-by-design outcomes.

You will provide expert advice using NZISM, ISO 31000 and related standards, produce risk artefacts, and influence governance through clear risk communication. CISSP/CRISC or similar certification is preferred.