Cyber Security Risk Manager

• Auckland based with hybrid working
• 6mth+ contract with competitive hourly rate
• Dedicated security project team

We are looking for an experienced Senior Risk Adviser to provide trusted IT risk advice and support across complex technology programmes and portfolios. This is a senior advisory role focused on strengthening risk management, supporting certification and accreditation activities, and helping project teams understand and effectively manage technology and information security risk.
Working closely with programme teams, technology leaders, service providers and key stakeholders, you will provide practical risk oversight across projects and systems, helping ensure risks are clearly understood, appropriately assessed and effectively managed.

What you’ll be doing

• Providing specialist IT risk advice to projects and programmes.
• Supporting Certification & Accreditation activities and ensuring risk requirements are incorporated into project planning.
• Completing initial solution and system risk assessments, as well as ad-hoc assessments where required.
• Identifying and assessing risks against established information security and risk frameworks.
• Producing clear risk summaries and presenting findings and recommendations to senior stakeholders.
• Supporting programme and portfolio managers with risk oversight and decision-making.
• Helping improve risk management processes, governance and awareness across the organisation.
• Providing training and guidance to project teams and stakeholders on risk and accreditation processes.

What we’re looking for
You’ll bring significant experience working across IT risk environments and be comfortable operating with a wide range of technical and business stakeholders.
Ideally, you will have:

• Around 10+ years’ experience within IT risk-related roles.
• At least three years’ organisational change management experience.
• Strong stakeholder and relationship management capability.
• Experience delivering training or communicating risk concepts to different audiences.
• An IT-related degree or equivalent practical experience.
• Relevant risk, audit or change certifications such as CISA, CIA or similar.
• Strong critical thinking, analysis and problem-solving skills.
• Clear written and verbal communication skills, with the confidence to present complex risk issues in straightforward language.

You’ll be someone who can build trusted relationships, influence effectively and bring a pragmatic, solutions-focused approach to risk. You’ll be comfortable challenging where required while working collaboratively with teams to achieve practical business and technology outcomes.

This is a great opportunity for an experienced IT risk professional who enjoys working across complex programmes and wants to play an important role in improving technology risk management and information security outcomes.