Senior Security Operations & Vulnerability Lead

Ministry of Justice - New Zealand; Wellington; On-site; NZD 128,000 - 177,000; Full time

Benefits offered by this job

4.4 weeks holiday leave

Flexible work hours

Online professional development portal

Inclusive networks

Job summary

MINISTRY OF JUSTICE - NEW ZEALAND is hiring a Senior Information Security Specialist in Wellington for a permanent full-time role. You will strengthen the cyber security posture, lead vulnerability management and advise technical teams, service providers and stakeholders.

You’ll support incident response as an initial responder and coordinate across application, endpoint, identity and access security. Join a collaborative team focused on practical, proportionate security outcomes.

Qualifications

• Strong vulnerability management and security risk assessment experience.
• Incident triage, containment and recovery capabilities.
• Knowledge of application, endpoint, identity and access controls.
• Able to communicate security risks to varied stakeholders.
• Understanding of te Tiriti o Waitangi and Te Ao Māori.

Responsibilities

• Lead vulnerability identification, assessment, prioritisation and remediation tracking.
• Assess exposure, business impact and available controls for risk-based decisions.
• Respond to security incidents and escalate complex investigations.
• Provide practical security advice for applications, endpoints, identities and access.
• Support security requests, reviews, documentation and process improvement.

Skills

Vulnerability management

Security risk assessment

Incident triage

Security controls knowledge

Stakeholder communication

Te Tiriti o Waitangi awareness

Education

Tertiary study or certifications

Tools

Microsoft Sentinel

Microsoft Defender

Entra ID

ServiceNow

Qualys

Job description

MINISTRY OF JUSTICE - NEW ZEALAND is hiring a Senior Information Security Specialist in Wellington for a permanent full-time role. You will strengthen the cyber security posture, lead vulnerability management and advise technical teams, service providers and stakeholders.

You’ll support incident response as an initial responder and coordinate across application, endpoint, identity and access security. Join a collaborative team focused on practical, proportionate security outcomes.