Security Assurance Architect - GRC & Compliance

Beyond Recruitment; Wellington; On-site; NZD 124,000 - 207,000; Full time

Benefits offered by this job

10-month contract

Full-time engagement

Based in Wellington

Immediate start

Rate up to $150 per hour

Job summary

Beyond Recruitment in Wellington is seeking an experienced Cyber Security Architect - GRC to support a major security assurance and system recertification programme. You will conduct security reviews, risk assessments, control validation activities and certification processes across critical information systems.

The role focuses on NZISM C&A, developing CVPs, CVAs, remediation plans and clear stakeholder communications to drive secure by design outcomes in a large public sector environment.

Qualifications

• Experience with NZISM C&A processes in NZ government contexts.
• Proven ability to perform Security Risk Assessments with risk statements and impact assessments.
• Experience developing and maintaining Control Validation Plans (CVPs).
• Hands-on experience performing Control Validation Audits (CVAs) with evidence collection and ratings.
• Experience developing Security Risk Management and remediation plans for stakeholders.
• Excellent written and verbal communication, capable of translating technical concepts for business audiences.
• Experience reviewing security aspects of designs and architecture documentation.
• Strong cross-functional stakeholder engagement across business and technology teams.

Responsibilities

• Perform certification and accreditation activities for existing information systems.
• Review system designs and architectures for security compliance.
• Develop, review, and maintain security artefacts including risk assessments and CVPs.
• Conduct security control effectiveness reviews and audits.
• Develop remediation plans and risk treatment strategies.
• Review penetration testing results and coordinate remediation actions.
• Prepare clear certification and accreditation recommendations for decision-makers.
• Provide security consulting to project teams and promote Secure by Design.
• Support projects to achieve certification through NZISM artefacts and documentation.

Skills

NZISM C&A

Security risk assessments

CVP development

CVAs

Remediation planning

Stakeholder engagement

Job description

Beyond Recruitment in Wellington is seeking an experienced Cyber Security Architect - GRC to support a major security assurance and system recertification programme. You will conduct security reviews, risk assessments, control validation activities and certification processes across critical information systems.

The role focuses on NZISM C&A, developing CVPs, CVAs, remediation plans and clear stakeholder communications to drive secure by design outcomes in a large public sector environment.