Principal Protective Security Risk Advisor - Cyber

New Zealand Government; Hamilton; Presencial; NZD 120.000 - 190.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Five weeks annual leave

Income Protection and Critical Illness

Professional development opportunities

Flexible working arrangements

Descripción de la vacante

NZ Transport Agency (Waka Kotahi) is seeking a Principal Protective Security Risk Advisor specializing in cyber. You will lead complex risk assessments for critical NZTA systems, provide expert guidance aligned with PSR, NZISM and ISO 31000, and define controls to enable secure, compliant services across transport networks.

You will influence accreditation outcomes, work with project teams, and advance AI-assisted risk workflows while maintaining professional judgment and governance

Formación

• Experience leading security risk assessments across complex information systems.
• Familiarity with enterprise IT risk management and governance.
• Ability to articulate cyber risk findings and practical treatments.

Responsabilidades

• Lead cyber security risk assessments across NZTA systems and services.
• Provide expert advice using PSR, NZISM, ISO 31000 and industry best practice.
• Define risk-proportionate security controls to support secure outcomes.
• Guide certification and accreditation activities and relevant governance discussions.
• Present cyber security risks and recommendations to governance forums.

Conocimientos

Cyber risk assessment

ISO 31000

NZISM

AI-assisted risk methods

GRC tooling

Communication

Educación

CISSP

CRISC

CGRC

SABSA

Herramientas

GRC tooling

AI prompting tools

Descripción del empleo

Strengthen cyber risk capability across NZTA through expert adviceLead complex cyber risk assessments for critical servicesGuide secure solutions through certification and accreditationLocation: Can be based in Auckland, Hamilton, Wellington or ChristchurchTe Whiwhinga mahi | The opportunityThis is an exciting opportunity to be part of the Protective Security Risk team and to contribute to the uplift on NZ Transport Agency | Waka Kotahi (NZTA)'s protective security capability maturity and strengthen the organisation's cyber security and protective security maturity.We are looking for someone with a strong background in cyber security risk assessment to join our team as Principal Protective Security Risk Advisor - Cyber.As Principal Advisor, you will work across critical corporate, regulatory and transport services and lead complex cyber security risk assessments that inform strategic and operational decision-making.This is an opportunity to influence secure-by-design outcomes, guide certification and accreditation activities, and help deliver resilient services that support New Zealanders. We are looking for someone with a strong background in cyber security risk assessment to join our team as Principal Cyber Security Risk Advisor.You will:Lead cyber security risk assessments across critical NZTA systems and servicesProvide expert advice using PSR, NZISM, ISO 31000 and industry best practiceProduce risk evaluation artefacts, including risk positions and security control recommendationsDefine risk-proportionate security controls to support secure solution outcomesPresent cyber security risks and recommendations to governance forumsUse AI assisted Security Risk Assessment development methods to enhance efficiency and the quality of risk identification, analysis and control identification while retaining appropriate oversight, professional judgement, and accountability for risk outcomes.Contribute with improvements for the use of GRC (Governance Risk Compliance) tooling for risk evaluations, including evaluation of new AI features that have potential to enhance risk evaluation and managementPartner with project, business and technical teams to achieve accreditation outcomesStrengthen cyber security control capability across NZTA through leadership and influenceYou will find out more about the role here Position DescriptionKo koe tenei | About youYou're an experienced cyber security risk assessment practitioner who thrives in project teams and enjoys tackling complex, diverse IT services, conducting detailed risk analysis and prescribing fit-for-purpose security controls to manage risk within the business's risk appetite.You will bring:Ability to lead security risk assessments for a broad range information servicesExperience and familiarity using common risk assessment toolsSound understanding of enterprise IT and services and their associated cyber risksConfident using conversational AI and structured prompts with context, constraints, assessment criteria and output formats for useful security analysis, rather than simple one-shot questions.Familiarity with AI agents to move beyond ad-hoc prompts to create repeatable AI-assisted workflows.Expert judgement for evaluating cyber risk severity and likelihood based on actual exposureAbility to articulate cyber risk findings clearly and recommend practical risk treatmentsExcellent communication and time management skillsProven ability to work effectively within teams and across business groupsEnthusiasm for learning and knowledge sharingIndustry security certifications such as CISSP, CRISC, CGRC or SABSA are preferred.'Mo matou |About UsAt NZTA, we deliver transport networks that connect people, places and New Zealand. Te Aukaha | Digital provides the technology and information services that enable better outcomes for our customers, partners and people.Within Digital, Security protects NZTA's people, information and technology through resilient operations, assurance, governance and secure-by-design practices.As part of Protective Security Risk Team, you will contribute to identifying threats and security risks to NZTA . You will be an influential advisor recommending and influencing the adoption and supporting the implementation of effective security controls and response procedures.Ka whiwhi koe i te aha | What you will get in returnThis is an opportunity to, helping strengthen the systems that support transport outcomes for New Zealand.Work alongside experienced security advisors and partners to identify security threats and risks and influence security improvements through best practice security measures.Contribute within a culture grounded in having heart, working better together, being brave and delivering meaningful outcomes.In addition, you'll benefit from:Flexible working arrangements that support work-life balanceFive weeks annual leaveIncome Protection and Critical Illness Insurance for permanent employeesProfessional development and career growth opportunitiesA collaborative and inclusive culture committed to delivering meaningful outcomes for New ZealandersMe pehea te tuku tono | How to applyPlease click apply to upload your CV and cover letter detailing your suitability for the role.Ra Katinga | Applications close17 November 2026For further information, email: [e-mail] be considered for this position you must have a legal right to live and work in New Zealand.NZTA| Waka Kotahi is an equal opportunity employer (EOE). We recognise the importance of diversity and inclusion and are committed to providing a working environment that embraces these values. Please let us know if you need any support or have any access requirements that will help you through the recruitment process.Please note that we may begin shortlisting as we receive applications. We encourage early applications as we may withdraw the advertising at any time.