Senior Cyber Security & GRC Assurance Lead

New Zealand Parliament; Wellington; Hybrid; NZD 126,000 - 148,000; Full time

Benefits offered by this job

On-site gym

Pool access

Learning & development opportunities

Flexible working arrangements

Job summary

The New Zealand Parliament IT division is seeking a Senior Digital Security Analyst to strengthen governance, risk, compliance and assurance across digital services. You will translate complex security requirements into practical guidance for Parliament IT, suppliers and government partners.

You'll lead risk assessments, support certification and accreditation, and mentor others while shaping security policy and assurance processes in a high-trust environment.

Qualifications

• Significant experience in a senior cyber security, security assurance, GRC or similar role within a large and complex organisation.
• Experience conducting security risk assessments, control reviews and assurance activities across systems, services and suppliers.
• Experience supporting certification and accreditation activities, including gathering evidence and preparing assurance advice.
• Strong written and verbal communication skills with the ability to influence stakeholders.

Responsibilities

• Lead security governance, risk, compliance and assurance activities across Parliament IT.
• Assess security risks and test the effectiveness of controls.
• Support certification and accreditation activities and produce assurance guidance.
• Translate technical security requirements into practical guidance for stakeholders across Parliament and suppliers.
• Mentor others and contribute to policy, standards and assurance processes.

Skills

Cyber security

Security assurance

GRC

Risk management

Policy development

Stakeholder engagement

Certification & accreditation

Mentoring

NZ government frameworks

Threat analysis

Education

Tertiary qualifications

Industry certifications

Job description

The New Zealand Parliament IT division is seeking a Senior Digital Security Analyst to strengthen governance, risk, compliance and assurance across digital services. You will translate complex security requirements into practical guidance for Parliament IT, suppliers and government partners.

You'll lead risk assessments, support certification and accreditation, and mentor others while shaping security policy and assurance processes in a high-trust environment.