Compliance & Risk Specialist

About the role

Auckland Council is looking for an experienced Compliance & Risk Specialist to join its Information Security team within Technology Services. You will play a key role in strengthening the council’s security governance, risk and compliance capabilities across a large and complex technology environment.

Key responsibilities

• Provide trusted advice on information security governance, risk and compliance for projects, Agile Release Trains and operational technology teams.
• Lead and facilitate security risk assessments and maintain the Technology Services Risk Register.
• Monitor, assess and report compliance with council security policies, standards and regulatory obligations, including PCI DSS.
• Develop and continuously improve security policies, standards and governance artefacts.
• Partner with stakeholders to identify security risks early and implement mitigation strategies.
• Support delivery of the council’s Information Security Strategy and related governance initiatives.
• Respond to information requests from LGOIMA and Integrity teams, including content and email searches.

Required profile

• At least five years of experience in information security with a focus on governance, risk and compliance.
• Proven ability to deliver GRC advisory and assurance services in large, complex organisations.
• Strong communication and influencing skills across technical and business audiences.
• Collaborative mindset with a pragmatic, risk‑based approach.

Required skills

• PCI DSS
• Agile methodologies