Strategic ICT Risk & Assurance Lead

Transpower New Zealand Limited; Wellington; On-site; NZD 120,000 - 160,000; Full time

Job summary

Transpower New Zealand Limited is seeking an experienced ICT Risk & Assurance Manager to lead risk, assurance, and governance across ICT, OT and cloud environments. You will shape assurance activities, deliver risk assessments, and provide practical leadership to technology and risk practitioners within IST.

You will influence senior leaders, collaborate with regulators and auditors, and help ensure resilient, secure systems for New Zealand’s critical infrastructure.

Qualifications

• Five years’ experience in ICT security, risk, assurance, audit or governance.
• Experience developing and operating ICT risk and assurance frameworks.
• Strong understanding of ICT security environments and implications for critical services.
• Regulatory compliance exposure and security control assessments.
• Ability to report clearly to senior leaders and engage stakeholders.

Responsibilities

• Provide leadership on ICT risk, governance and assurance matters.
• Manage the assurance schedule and track findings to closure.
• Develop bowtie-based risk models and executive risk reporting.
• Develop and maintain ICT risk management policies and standards.
• Influence how ICT risk is understood across nationally significant infrastructure.

Skills

ICT security

Risk management

Governance

Stakeholder engagement

Education

Tertiary qualification in computer science / cyber security / information security

Tools

NIST

ISO 27001

IEC 62443

Job description

Transpower New Zealand Limited is seeking an experienced ICT Risk & Assurance Manager to lead risk, assurance, and governance across ICT, OT and cloud environments. You will shape assurance activities, deliver risk assessments, and provide practical leadership to technology and risk practitioners within IST.

You will influence senior leaders, collaborate with regulators and auditors, and help ensure resilient, secure systems for New Zealand’s critical infrastructure.