Senior Information Security Specialist

CGR Services; Wellington; On-site; NZD 128,000 - 177,000; Full time

Benefits offered by this job

4.4 weeks holiday leave

Flexible work hours

Online professional development portal

Inclusive networks

Job summary

Ministry of Justice (Te Tāhū o te Ture) in Wellington seeks a Senior Information Security Specialist to lead vulnerability management and strengthen cyber security posture. You will identify weaknesses, assess risk, and drive remediation across systems, working with IT teams and service providers.

You will respond to security incidents as an initial responder and escalation point, supporting secure technology decisions.

Qualifications

• Experience in vulnerability management and security risk assessment.
• Understanding of incident triage, investigation, containment and recovery.
• Knowledge of application, endpoint, identity and access security controls.
• Ability to communicate security risks clearly with varied stakeholders.

Responsibilities

• Lead vulnerability identification, assessment, prioritisation and remediation tracking.
• Assess exposure, business impact and available controls to support risk-based decisions.
• Respond to security incidents and act as escalation point for complex investigations.
• Provide practical security advice for applications, endpoints, identities and access.
• Support security requests, reviews, documentation and process improvement.

Skills

Vulnerability management

Incident response

Security risk assessment

Security controls

Stakeholder communication

Te Tiriti o Waitangi knowledge

Education

Relevant tertiary study

Industry certifications

Tools

Microsoft Sentinel

Microsoft Defender

Entra ID

ServiceNow

Qualys

Job description

Senior Information Security Specialist Permanent Full Time Wellington Te Haeata/The Opportunity Help strengthen the Ministry's cyber security posture in a senior operational role where vulnerability management is your primary focus. You will identify, assess and help drive the remediation of security weaknesses across our environment, while providing practical advice to technical teams, service providers and stakeholders. As part of the Security Operations Centre, you will also support incident response as an initial responder and escalation point for complex or higher-risk events. You will work closely with another specialist and the wider team across operational security requests, application security, endpoint security and identity and access management.

• Lead vulnerability identification, assessment, prioritisation and remediation tracking.
• Assess exposure, business impact and available controls to support risk-based decisions.
• Respond to security incidents and act as an escalation point for complex investigations.
• Provide practical security advice for applications, endpoints, identities and access.
• Support security requests, reviews, documentation and continuous process improvement.

Ō pūkenga/Skills and Experience No candidate will meet every single desired qualification. If your experience looks a little different from what we have outlined and believe you can bring value to the role, we'd love to hear from you! To be successful in this role you will:

• Bring strong vulnerability management and security risk assessment experience.
• Understand incident triage, investigation, containment, escalation and recovery.
• Apply sound knowledge of application, endpoint, identity and access security controls.
• Communicate complex security risks clearly and work effectively with varied stakeholders.
• Show commitment to te Tiriti o Waitangi and an understanding of Te Ao Māori.

Experience with Microsoft Sentinel, Microsoft Defender, Entra ID, ServiceNow, Qualys or similar security tools would be useful. Relevant tertiary study, industry certifications or equivalent practical experience will also be valued, together with a commitment to ongoing professional development.

Mō mātou/About us

At Te Tāhū o te Ture - the Ministry of Justice, we're committed to strengthening people's trust in the law of Aotearoa, NewZealand. The Security Operations Centre helps protect the Ministry's people, information, systems and services. We monitor and respond to security events, manage vulnerabilities, support secure technology decisions and work with internal teams and service providers to reduce cyber risk. You will join a collaborative team that shares knowledge, supports one another and values practical, proportionate security outcomes.

Joining Te Tāhū o te Ture means you will become part of an organisation that welcomes and supports people of all gender identities, ages, ethnicities, sexual orientations, disabilities and religions.

Ngā painga o tēnei wāhi mahi/What's great about working here

We offer you a range of benefits to support your wellbeing and help make the Ministry a great place to be. These include:

• 4.4 weeks holiday leave
• flexible work hours where possible
• an online professional development portal
• access to a variety of inclusive and proactive networks

With a wide range of jobs, you also get the chance to gain a variety of skills and experience while developing your career.

Utu ā-tau/Salary

The appointing salary for this role will be between $128,427 and $176,789 based on skills and experience.