The opportunity

Our client is looking for an intermediate-level Cyber Security Advisor to support the ongoing certification and assurance of its existing information systems.

This is primarily a maintenance and assurance role, heavily focused on reviewing, auditing and re-certifying established systems.

You will assess existing security documentation and controls, identify gaps, work with relevant stakeholders to gather evidence and ensure systems continue to meet required security standards.

You will be responsible for

• Reviewing and re-certifying existing information systems
• Auditing security controls, documentation and supporting evidence
• Assessing systems against relevant security policies and standards
• Identifying gaps, risks and areas requiring remediation
• Maintaining accurate certification and assurance documentation

What we’re looking for

• Experience in cyber security advisory, assurance, risk or compliance

• Strong understanding of the NZISM Certification and Accreditation process within New Zealand government organisations.
• Proven experience conducting security risk assessments, including identifying and assessing risks and recommending appropriate security controls.
• Experience developing Control Validation Plans and conducting Control Validation Audits
• Strong written and verbal communication skills, with experience preparing Security Risk Management Plans, remediation plans and technical documentation for both technical and non-technical audiences.

This role would suit an intermediate Cyber Security Advisor who enjoys detailed assurance work and is comfortable working independently within established frameworks and processes.

Please note that we can only accept applications for this position from candidates holding valid NZ Working Rights.