Technology Risk Analyst: Elevate Security & Controls

Southern Cross; Auckland; On-site; NZD 90,000 - 125,000; Full time

Job summary

Southern Cross Auckland seeks a Technology Risk Analyst on a fixed-term basis until 30 June 2027 to join our Information & Security team, supporting risk management across Digital Platforms.

You will partner with stakeholders to mitigate technology risks, perform control testing, vendor risk assessments (ISAE 3402, SOC1, SOC2) and uplift risk practices, requiring strong communication and the ability to work independently or with a team.

Qualifications

• 3-5 years' proven experience in a technology risk or assurance role.
• Solid understanding of IT and cyber frameworks (e.g., COBIT, NIST, ITIL, ISO 27001, CIS, NZISM).
• Industry certification such as CISA, CRISC or CISSP advantageous.
• Relevant tertiary qualification in a technology-related discipline beneficial.

Responsibilities

• Perform risk assessments and control testing across Digital Platforms.
• Maintain risk and issue registers; escalate top risks with mitigants.
• Advise control owners and stakeholders on risk and controls best practices.

Skills

Technology risk

Risk assessment

Controls testing

Stakeholder communication

Education

Relevant tertiary qualification in technology or related field

Tools

COBIT

NIST

ISO 27001

NZISM

CISA/CRISC/CISSP (advantageous)

Job description

Southern Cross Auckland seeks a Technology Risk Analyst on a fixed-term basis until 30 June 2027 to join our Information & Security team, supporting risk management across Digital Platforms.

You will partner with stakeholders to mitigate technology risks, perform control testing, vendor risk assessments (ISAE 3402, SOC1, SOC2) and uplift risk practices, requiring strong communication and the ability to work independently or with a team.