Strategic Head of Information Security & Resilience

MAS - Medical Assurance Society; Auckland; On-site; NZD 180,000 - 300,000; Full time

Benefits offered by this job

Health insurance

Life insurance

KiwiSaver 6%

Job summary

MAS - Medical Assurance Society seeks an experienced security leader to shape cyber security, data protection and resilience for the organisation. Reporting to the CTO, you will guide security strategy, drive maturity, and partner with risk, legal and the Board.

The role spans multiple NZ offices (Auckland/Wellington/Christchurch) and requires building a high-performing team, aligning policy with business goals and enabling innovation while protecting Members.

Qualifications

• Significant experience leading information/cyber security programmes at scale.
• Proven ability to influence executives and boards on risk.
• Strong knowledge of governance frameworks (NIST, ISO 27001, SOC 2).
• Experience in regulated environments such as financial services or technology.

Responsibilities

• Develop and deliver MAS's Security and Data Protection Strategy.
• Drive maturity initiatives and foster a security culture across the organisation.
• Lead cyber resilience, security operations and incident response capability.
• Strengthen data protection, information management and DLP practices.
• Establish security governance frameworks and risk oversight for regulatory/compliance obligations.
• Manage third-party and supply chain security risks with external partners.
• Support secure adoption of cloud and emerging tech including AI.
• Provide trusted security advice and reporting to Executive and Board.
• Lead and develop a small team while building security capability across the business.

Skills

Info security

Cyber security

Executive stakeholder mgmt

Governance frameworks

Strategy leadership

Regulatory compliance

Cloud security

Tools

Azure

AWS

Job description

MAS - Medical Assurance Society seeks an experienced security leader to shape cyber security, data protection and resilience for the organisation. Reporting to the CTO, you will guide security strategy, drive maturity, and partner with risk, legal and the Board.

The role spans multiple NZ offices (Auckland/Wellington/Christchurch) and requires building a high-performing team, aligning policy with business goals and enabling innovation while protecting Members.