Cyber Security Specialist

About the role

The Cyber Security Specialist will support the delivery of information security management across a complex project environment. You will provide technical and strategic expertise to protect systems, data and information, designing and implementing security controls while ensuring compliance and security‑by‑design.

Key responsibilities

• Design, implement and maintain security controls for cloud and on‑premise systems.
• Provide guidance on security standards and ensure solutions meet compliance requirements.
• Collaborate with internal teams and external partners on risk assessments, certification and accreditation activities.
• Support supplier onboarding, ongoing assurance and security assurance for the programme.
• Identify risks and strengthen security practices across the project portfolio.

Required profile

• Minimum 6 years in a technical IT role and at least 4 years in an information security role.
• Relevant tertiary, technical or industry qualification.
• Broad knowledge of security risk management in public cloud environments, with deep expertise in Microsoft M365 and Azure security.
• Understanding of security architectural principles, frameworks and audit/assurance disciplines.
• Familiarity with NZISM, PSR, CSA, CCM and common security frameworks such as ISO/IEC 270xx, ITIL, NIST and COBIT.
• Eligibility to obtain and maintain a New Zealand National Security Clearance at SECRET level.
• Demonstrated knowledge of Te Tiriti o Waitangi.

Required skills

• Microsoft M365 security
• Microsoft Azure security
• Public cloud security risk management
• Security architecture and design
• ISO/IEC 270xx, ITIL, NIST, COBIT frameworks
• Operating‑system internals and network protocols
• Cryptography principles
• White‑box and black‑box testing, code review, vulnerability scanning and penetration testing
• Risk, business impact, control and vulnerability assessments

What we offer

• Fixed‑term contract until September 2027.