Lead independent security assurance across NZTA's critical controls
Apply expert judgement to assess enterprise security risk and effectiveness
Influence assurance outcomes across a complex national environment
Location: Auckland, Hamilton, Wellington, Palmerston North or Christchurch
This is a rare opportunity to join NZ Transport Agency | Waka Kotahi (NZTA) as we strengthen our Security Assurance capability, providing independent assurance that critical security controls are operating effectively across one of New Zealand's largest and most complex digital environments.
Te Whiwhinga mahi | The opportunity
We're looking for an experienced security assurance professional to join NZTA as a Principal Advisor Security Assurance . This senior specialist role is responsible for delivering independent, evidence-based assurance assessments that provide confidence in the effectiveness of security controls across NZTA's people, information, technology and third-party environments.
As Principal Advisor Security Assurance, you'll conduct end-to-end assurance activities across assigned domains, applying expert judgement and established methodologies to test and validate the design and operating effectiveness of security controls. Your work will help ensure NZTA has a clear and accurate understanding of security risk exposure and control performance across critical services and systems.
Working closely with the Manager Security Assurance, Lead Assurance Advisors, security stakeholders and technology leaders, you'll provide independent assurance insights that support informed decision-making and continuous improvement of NZTA's security posture.
You will:
Lead independent security assurance assessments from planning through to reporting
Evaluate the design and operating effectiveness of security controls
Gather and assess evidence through testing, observation and stakeholder engagement
Identify control weaknesses, risk exposures and opportunities for improvement
Validate security remediation activities and confirm risk treatments are effective
Produce clear, evidence-based findings and recommendations for governance reporting
Conduct assurance activities across third-party and supply chain environments
Contribute to the ongoing improvement of security assurance methodologies and practices
Support the development of security policies, standards and control frameworks through assurance insights.
You will find out more about the role here - Position Description
Ko koe tēnei | About you
You'll be an experienced security assurance, audit or risk professional with strong technical knowledge, sound judgement and the ability to assess complex security controls objectively and independently.
You'll be comfortable working across technical and business environments, gathering evidence, analysing risk and providing trusted advice that stands up to scrutiny.
To be successful in this role, you will bring:
Experience conducting independent security assurance, control effectiveness testing or security audits within large or complex organisations
Strong understanding of security controls across cyber, technical or protective security domains
Knowledge of NZISM, Protective Security Requirements (PSR) and relevant security frameworks
Experience gathering and evaluating evidence through testing, observation and documentation review
Strong analytical and report writing skills, producing evidence-based findings and recommendations
The ability to maintain professional independence and provide objective assurance conclusions
Experience assessing security controls within supplier, outsourced or third-party environments
Strong stakeholder engagement skills and the ability to communicate findings clearly and effectively.
Relevant tertiary qualifications in information security, audit, risk management or a related discipline, together with professional certifications such as CISA, CISSP or equivalent, would be advantageous.
The successful candidate must be able to…