Principal Advisor Security Assurance

• Lead independent security assurance across NZTA's critical controls
• Apply expert judgement to assess enterprise security risk and effectiveness
• Influence assurance outcomes across a complex national environment
• Location: Auckland, Hamilton, Wellington, Palmerston North or Christchurch

This is a rare opportunity to join NZ Transport Agency | Waka Kotahi (NZTA) as we strengthen our Security Assurance capability, providing independent assurance that critical security controls are operating effectively across one of New Zealand's largest and most complex digital environments.

Te Whiwhinga mahi | The opportunity

We're looking for an experienced security assurance professional to join NZTA as a Principal Advisor Security Assurance. This senior specialist role is responsible for delivering independent, evidence-based assurance assessments that provide confidence in the effectiveness of security controls across NZTA's people, information, technology and third-party environments.

As Principal Advisor Security Assurance, you'll conduct end-to-end assurance activities across assigned domains, applying expert judgement and established methodologies to test and validate the design and operating effectiveness of security controls. Your work will help ensure NZTA has a clear and accurate understanding of security risk exposure and control performance across critical services and systems.

Working closely with the Manager Security Assurance, Lead Assurance Advisors, security stakeholders and technology leaders, you'll provide independent assurance insights that support informed decision-making and continuous improvement of NZTA's security posture.

You will:

• Lead independent security assurance assessments from planning through to reporting
• Evaluate the design and operating effectiveness of security controls
• Gather and assess evidence through testing, observation and stakeholder engagement
• Identify control weaknesses, risk exposures and opportunities for improvement
• Validate security remediation activities and confirm risk treatments are effective
• Produce clear, evidence-based findings and recommendations for governance reporting
• Conduct assurance activities across third-party and supply chain environments
• Contribute to the ongoing improvement of security assurance methodologies and practices
• Support the development of security policies, standards and control frameworks through assurance insights.

You will find out more about the role here - Position Description

Ko koe tēnei | About you

You'll be an experienced security assurance, audit or risk professional with strong technical knowledge, sound judgement and the ability to assess complex security controls objectively and independently.

You'll be comfortable working across technical and business environments, gathering evidence, analysing risk and providing trusted advice that stands up to scrutiny.

To be successful in this role, you will bring:

• Experience conducting independent security assurance, control effectiveness testing or security audits within large or complex organisations
• Strong understanding of security controls across cyber, technical or protective security domains
• Knowledge of NZISM, Protective Security Requirements (PSR) and relevant security frameworks
• Experience gathering and evaluating evidence through testing, observation and documentation review
• Strong analytical and report writing skills, producing evidence-based findings and recommendations
• The ability to maintain professional independence and provide objective assurance conclusions
• Experience assessing security controls within supplier, outsourced or third-party environments
• Strong stakeholder engagement skills and the ability to communicate findings clearly and effectively.

Relevant tertiary qualifications in information security, audit, risk management or a related discipline, together with professional certifications such as CISA, CISSP or equivalent, would be advantageous.

The successful candidate must be able to achieve and maintain a New Zealand Government security clearance up to and including SECRET.

You will demonstrate knowledge of, or a willingness to gain an understanding of, Te Ao Māori and promote tikanga and Te Reo Māori. You will also have knowledge of, or a willingness to gain an appreciation of, Te Tiriti o Waitangi as it applies in the public sector.

Mō mātou | About us

Te Aukaha | Digital provides modern, fit-for-purpose digital, information and technology solutions that support decision-making and make it easier for our people, partners and customers to work with us.

Our Security team enables NZTA to safely deliver its outcomes by reducing enterprise security risk across our people, places, information and technology.

Ka whiwhi koe i te aha | What you will get in return

This is an opportunity to influence security assurance outcomes across a nationally significant organisation and help ensure NZTA's security controls are operating effectively across critical services, platforms and supplier environments.

You'll work alongside experienced security professionals, contribute to enterprise risk management and play a key role in strengthening NZTA's security assurance capability.

In addition, you'll benefit from:

• Five weeks' annual leave
• Income protection and critical illness insurance for permanent employees
• Flexible working arrangements, where appropriate for the role
• Opportunities for professional development and continued learning

Ready to apply your security assurance expertise in a role with national impact? We'd love to hear from you.

Me pēhea te tuku tono | How to apply

Please click Apply to upload your CV and cover letter detailing your suitability for the role.

Rā Katinga | Applications close:

26 November 2026

For further information, email: [email protected]

To be considered for this position you must have a legal right to live and work in New Zealand.

Waka Kotahi is an equal opportunity employer (EOE). We recognise the importance of diversity and inclusion and are committed to providing a working environment that embraces these values. Please let us know if you need any support or have any access requirements that will help you through the recruitment process.

Please note that we may begin shortlisting as we receive applications. We encourage early applications as we may withdraw the advertising at any time.