Security Risk & Compliance Analyst

Cubic Transportation Systems; Wellington; On-site; NZD 120,000 - 180,000; Full time

Job summary

Cubic Transportation Systems is seeking an experienced Information Security professional to provide security compliance support for production environments. You will evaluate controls, plan IT compliance programs, and coordinate PCI-DSS, ISO 27001, SOC 1 & SOC 2 audits across the organization.

You will work with internal teams and external auditors, manage remediation plans, and ensure adherence to corporate standards and risk governance frameworks.

Qualifications

• Minimum 8 years’ experience in services or IT systems in a mission critical setting.
• University degree in Computer Science, Engineering, or related field; or Business Admin with IT experience.
• At least 5 years’ experience in IT security and/or Payment Card processing systems.

Responsibilities

• Perform as SME on Security Risk Assessment methodology, policy, strategy and processes.
• Coordinate security audits with internal/external auditors and stakeholders.
• Lead controls reviews to ensure continuous compliance with security policies and standards.
• Identify and report information security risks across applications, data centers, and cloud.
• Document remediation plans and track progress to ensure timely closure.

Skills

Security risk assessment

Stakeholder management

Audit coordination

Policy & controls

Microsoft Office

Cross-functional teamwork

Education

Bachelor's degree in CS/Engineering

IT security certification

Tools

OneTrust GRC

PCI DSS familiarity

Job description

Cubic Transportation Systems is seeking an experienced Information Security professional to provide security compliance support for production environments. You will evaluate controls, plan IT compliance programs, and coordinate PCI-DSS, ISO 27001, SOC 1 & SOC 2 audits across the organization.

You will work with internal teams and external auditors, manage remediation plans, and ensure adherence to corporate standards and risk governance frameworks.