Principal Cyber Risk Advisor – Protective Security Leader

NZ Transport Agency Waka Kotahi; Hamilton; On-site; NZD 120,000 - 180,000; Full time

Benefits offered by this job

Flexible working arrangements

Five weeks annual leave

Income Protection and Critical Illness

Professional development and career

Job summary

NZ Transport Agency | Waka Kotahi seeks a Principal Protective Security Risk Advisor – Cyber to strengthen cyber risk capability across critical services. You will lead complex cyber risk assessments, guide certification and accreditation, and work across corporate and transport services to inform strategic decisions.

You will use PSR, NZISM, ISO 31000, and AI-assisted methods to improve risk identification and control design, partner with project teams to achieve accreditation outcomes, and

Qualifications

• Experience conducting enterprise-wide cyber risk assessments.
• Ability to develop risk treatment plans.
• Strong communication with governance forums.

Responsibilities

• Lead cyber security risk assessments across critical NZTA systems.
• Provide expert advice using PSR, NZISM, ISO 31000.
• Produce risk evaluation artefacts and control recommendations.
• Define risk-proportionate controls to support secure outcomes.
• Present risks and recommendations to governance forums.
• Use AI-assisted risk assessment methods to improve efficiency and quality of risk identification, analysis and control identification.
• Contribute to improvements in GRC tooling for risk evaluations.
• Partner with project teams to achieve accreditation outcomes.
• Strengthen cyber security control capability through leadership and influence.

Skills

Cyber risk leadership

Risk artefacts

NZISM / ISO 31000

AI-assisted risk

Communication

Stakeholder engagement

Security controls

Security certs (CISSP/CRISC)

Education

Bachelor's degree in Information Security or related field

Job description

NZ Transport Agency | Waka Kotahi seeks a Principal Protective Security Risk Advisor – Cyber to strengthen cyber risk capability across critical services. You will lead complex cyber risk assessments, guide certification and accreditation, and work across corporate and transport services to inform strategic decisions.

You will use PSR, NZISM, ISO 31000, and AI-assisted methods to improve risk identification and control design, partner with project teams to achieve accreditation outcomes, and