Cyber Risk & Compliance Manager

About the role

As the Cyber Risk & Compliance Manager at One NZ you will lead a dedicated team to protect the organisation’s digital assets, ensure regulatory compliance and embed robust security practices across the business.

Key responsibilities

• Identify, assess and manage cyber security risks, maintain the enterprise risk register and provide clear reporting to senior stakeholders.
• Design, implement and continuously test security controls aligned with frameworks such as NIST CSF.
• Ensure compliance with regulatory standards (e.g., PCI DSS), manage internal and external audits and drive timely remediation of findings.
• Own and evolve cyber security policies, standards and procedures to raise maturity.
• Manage third‑party cyber risk and lead organisation‑wide security awareness and training programmes.
• Partner with business units and governance forums to provide expert advice and strengthen risk and compliance capability.
• Lead, coach and develop a high‑performing team, overseeing workload, performance and day‑to‑day people leadership.

Required profile

• Extensive experience in information security with strong expertise in cyber risk, compliance and audit.
• Demonstrated leadership capability managing and developing high‑performing teams.
• Strong knowledge of security frameworks and standards such as NIST CSF and ISO 27001.
• Experience managing regulatory compliance obligations, including PCI DSS.
• Relevant tertiary qualification in information security or a related field; auditor qualifications (e.g., ISO) are a plus.

Required skills

• NIST Cybersecurity Framework
• ISO 27001
• PCI DSS
• Security risk assessment
• Security controls implementation
• Third‑party risk management