Cyber Security Specialist

About the role

We are looking for a Cyber Security Specialist to support the delivery of information security management across a complex project environment in New Zealand’s financial ecosystem. The role combines technical and strategic expertise to protect systems, data and information, ensuring security‑by‑design and compliance with relevant standards.

Key responsibilities

• Design, implement and maintain security controls for Microsoft 365 and Azure environments.
• Conduct risk assessments, vulnerability scans and penetration testing across cloud services.
• Provide guidance on security standards and ensure solutions meet NZISM, PSR, CSA and CCM requirements.
• Support certification, accreditation and supplier onboarding activities.
• Collaborate with internal teams and external partners to embed security practices throughout the programme.

Required profile

• Minimum 6 years in a technical IT role and 4 years in information security.
• Relevant tertiary, technical or industry qualification.
• Eligibility for a New Zealand National Security Clearance at SECRET level.
• Strong analytical skills and attention to detail.

Required skills

• Microsoft 365 and Azure security.
• Cloud security risk management (public cloud, XaaS models).
• Knowledge of NZISM, Protective Security Requirements, CSA and Cloud Controls Matrix.
• Familiarity with ISO/IEC 27001, ITIL, NIST and COBIT frameworks.
• Operating system internals, network protocols, cryptography.
• Security testing: white‑box, black‑box, code review, vulnerability scanning, penetration testing.
• Risk, business impact, control and vulnerability assessment.

What we offer

• Fixed‑term contract until September 2027.
• Five weeks of annual leave.
• Flexible working arrangements and wellbeing benefits.