Strategic ICT Risk & Assurance Lead

Transpower; Wellington; Hybrid; NZD 140,000 - 190,000; Full time

Job summary

Transpower seeks an experienced ICT Risk & Assurance Manager to lead risk, governance, and assurance activities. You will manage risk assessments, drive control effectiveness, and provide practical leadership across ICT risk, resilience, and governance.

Reporting to the Head of Security Services within IST, you will collaborate with risk, legal and privacy teams, auditors and regulators, translating complex security issues into clear business guidance and actions.

Qualifications

• At least five years’ experience in ICT security, risk, assurance, audit or governance, including developing and operating ICT risk and assurance frameworks.
• Sound understanding of ICT security environments and the implications of security risks for critical services.
• Experience in regulatory compliance, assurance reviews and security control assessments.
• Demonstrated ability to support delivery teams at an operational level and senior leaders as a trusted adviser with clear reporting and stakeholder engagement.
• A relevant tertiary qualification in computer science, cyber security, information security, engineering, risk management or similar.

Responsibilities

• Provide leadership and SME input on ICT risk, governance and assurance matters across Transpower.
• Manage the assurance schedule and facilitate reviews of risk controls, tracking actions to completion.
• Develop and maintain bowtie-based risk models and Semi-Quantified Risk Analysis.
• Prepare executive reporting on risk exposure, control effectiveness, compliance and resilience.
• Develop and maintain ICT risk policies and standards, providing compliance guidance to management and delivery teams.

Skills

Outstanding communication skills

Curiosity

Sound judgement

Stakeholder management

Translating security to business terms

Education

Bachelor's degree / relevant tertiary qualification

Tools

Bowtie-based risk modelling

Semi-Quantified Risk Analysis

Regulatory reporting

Job description

Transpower seeks an experienced ICT Risk & Assurance Manager to lead risk, governance, and assurance activities. You will manage risk assessments, drive control effectiveness, and provide practical leadership across ICT risk, resilience, and governance.

Reporting to the Head of Security Services within IST, you will collaborate with risk, legal and privacy teams, auditors and regulators, translating complex security issues into clear business guidance and actions.