Senior Vulnerability & Incident Response Lead

CGR Services; Wellington; On-site; NZD 128,000 - 177,000; Full time

Benefits offered by this job

4.4 weeks holiday leave

Flexible work hours

Online professional development portal

Inclusive networks

Job summary

Ministry of Justice (Te Tāhū o te Ture) in Wellington seeks a Senior Information Security Specialist to lead vulnerability management and strengthen cyber security posture. You will identify weaknesses, assess risk, and drive remediation across systems, working with IT teams and service providers.

You will respond to security incidents as an initial responder and escalation point, supporting secure technology decisions.

Qualifications

• Experience in vulnerability management and security risk assessment.
• Understanding of incident triage, investigation, containment and recovery.
• Knowledge of application, endpoint, identity and access security controls.
• Ability to communicate security risks clearly with varied stakeholders.

Responsibilities

• Lead vulnerability identification, assessment, prioritisation and remediation tracking.
• Assess exposure, business impact and available controls to support risk-based decisions.
• Respond to security incidents and act as escalation point for complex investigations.
• Provide practical security advice for applications, endpoints, identities and access.
• Support security requests, reviews, documentation and process improvement.

Skills

Vulnerability management

Incident response

Security risk assessment

Security controls

Stakeholder communication

Te Tiriti o Waitangi knowledge

Education

Relevant tertiary study

Industry certifications

Tools

Microsoft Sentinel

Microsoft Defender

Entra ID

ServiceNow

Qualys

Job description

Ministry of Justice (Te Tāhū o te Ture) in Wellington seeks a Senior Information Security Specialist to lead vulnerability management and strengthen cyber security posture. You will identify weaknesses, assess risk, and drive remediation across systems, working with IT teams and service providers.

You will respond to security incidents as an initial responder and escalation point, supporting secure technology decisions.