Security Risk And Compliance Specialist
15 hours ago
Xero is a beautiful, easy-to-use platform that helps small businesses and their accounting and bookkeeping advisors grow and thrive.At Xero, our purpose is to make life better for people in small business, their advisors, and communities around the world.
This purpose sits at the centre of everything we do.
We support our people to do the best work of their lives so that they can help small businesses succeed through better tools, information and connections.
Because when they succeed they make a difference, and when millions of small businesses are making a difference, the world is a more beautiful place.About the roleThe Security Risk and Compliance Specialist will bring their experience to a team working with all parts of the business to improve Xero's security risk and compliance posture, to reduce the risk of security incidents and improve the efficiency and effectiveness of Xero's security controls.What you'll doSupport contributors across Xero in conducting risk assessments to identify potential security threats and vulnerabilities, and evaluate security risks across all areas of Xero's business, including product and technology, and third party software and services, to ensure these are well understood and managed within Xero's risk tolerance.Ensure security compliance obligations with applicable laws, regulations and standards such as ISO 27001, SOC 2, PCI-DSS or other international or regional frameworks, are understood and met across Xero.Support product teams in performing threat modeling of new/updated product features.Perform risk assessments for Ecosystem partners and third party suppliers, ensuring that security risks are assessed and understood prior to, and during the engagement with the third party.Using the security risk management framework, ensure risks are documented, quantified, owned, communicated and escalated as appropriate across Xero.Provide input to responses to customer and supplier security assessments.Monitor and assess emerging security threats that could affect Xero, and propose strategies to mitigate them.Support process improvement and automation using technical skills and experience.Foster cross-disciplinary understanding of security risk and compliance and raise awareness of risk.What success looks likeChanges to Xero's product and corporate infrastructure are in compliance with the IT Security Policy and standards and meet Xero's compliance obligations.Risks are identified and managed according to Xero's risk appetite, in a timely manner and in alignment with business objectives.Security assessments are completed and documented for all new third party software and technology services.Audits and other compliance assessment activities are completed successfully, and compliance is maintained with required standards.Management has timely and appropriate visibility of Xero's security risk status.What you'll bring3+ years in a role in an information security and risk management practice.Experience with ISO27001:2022, SOC 2 Type 2 or PCI-DSS compliance frameworks.Recognised as a high performer and leading contributor in your team.Experience working with AI and data to drive automation.Please note: We will be observing a holiday shutdown period, during which there may be delays in our recruitment process, including responses and updates.
We'll resume full operations in the week commencing 13th January.
Thank you for your patience and understanding.Why Xero?Offering very generous paid leave to use however you'd like (plus statutory holidays
), dedicated paid leave to care for your physical and mental wellbeing as well as an Employee Assistance Program to access mental health care for you and your family, free medical insurance, wellbeing and sports programmes, employee resource groups, 26 weeks of paid parental leave for primary caregivers, an Employee Share Plan, beautiful offices, flexible working, career development, and many other benefits that reflect our human value, you'll do the best work of your life at Xero.
#J-18808-Ljbffr
-
Cyber Security Partner
4 days ago
Auckland, New Zealand Vector Limited Full timeCyber Security Partner (Governance, Risk & Compliance) Want to work somewhere where you are doing good for the world, your community and yourself at the same time?Whatever your role at Vector, we'll stretch you to find solutions for some of the world's biggest challenges.And they don't get much bigger than redesigning our energy future for a world of EV's...
-
Cyber Security Partner
4 days ago
Auckland, New Zealand Vector Limited Full timeCyber Security Partner (Governance, Risk & Compliance)Want to work somewhere where you are doing good for the world, your community and yourself at the same time?Whatever your role at Vector, we'll stretch you to find solutions for some of the world's biggest challenges.And they don't get much bigger than redesigning our energy future for a world of EV's and...
-
Cyber Security Partner
4 days ago
Auckland, New Zealand Vector Limited Full timeCyber Security Partner (Governance, Risk & Compliance)Want to work somewhere where you are doing good for the world, your community and yourself at the same time?Whatever your role at Vector, we’ll stretch you to find solutions for some of the world’s biggest challenges. And they don’t get much bigger than redesigning our energy future for a world of...
-
Cyber Security Partner
4 days ago
Auckland, New Zealand Vector Limited Full timeCyber Security Partner (Governance, Risk & Compliance) Want to work somewhere where you are doing good for the world, your community and yourself at the same time? Whatever your role at Vector, we’ll stretch you to find solutions for some of the world’s biggest challenges. And they don’t get much bigger than redesigning our energy future for a world of...
-
Senior Cyber Security Partner
4 days ago
Auckland, New Zealand Vector Limited Full timeSenior Cyber Security Partner (Governance, Risk & Compliance)Full-timeEngagement type: Permanent - EmployeeDepartment: Cyber Security, Architecture and CloudThe roleThe cyber security governance, risk and compliance team support Vector's business units and leadership team to understand cyber security risks and compliance obligations, enabling informed and...
-
Senior Cyber Security Partner
4 days ago
Auckland, New Zealand Vector Limited Full timeSenior Cyber Security Partner (Governance, Risk & Compliance)Full-time Engagement type: Permanent - Employee Department: Cyber Security, Architecture and Cloud The role The cyber security governance, risk and compliance team support Vector’s business units and leadership team to understand cyber security risks and compliance obligations, enabling informed...
-
Senior Cyber Security Partner
4 days ago
Auckland, New Zealand Vector Limited Full timeSenior Cyber Security Partner (Governance, Risk & Compliance) Full-time Engagement type: Permanent - Employee Department: Cyber Security, Architecture and Cloud The role The cyber security governance, risk and compliance team support Vector’s business units and leadership team to understand cyber security risks and compliance obligations, enabling...
-
Cybersecurity Risk
1 week ago
Auckland City, New Zealand Fonterra Full time**Our Co-operative** **Te Mātāpuna toa takitini** Fonterra’s strength is in the collective We are a Co-operative created and owned by Aotearoa New Zealand dairy farmers. Our rich history is built on farming families working together to share the natural goodness of our dairy with the world. Collaboration, innovation, and passion was the cornerstone...
-
Senior Cyber Security Partner
4 days ago
Auckland, New Zealand Vector Limited Full timeSenior Cyber Security Partner (Governance, Risk & Compliance)Want to work somewhere where you are doing good for the world, your community and yourself at the same time?Whatever your role at Vector, we'll stretch you to find solutions for some of the world's biggest challenges.And they don't get much bigger than redesigning our energy future for a world of...
-
Senior Cyber Security Partner
4 days ago
Auckland, New Zealand Vector Limited Full timeSenior Cyber Security Partner (Governance, Risk & Compliance)Want to work somewhere where you are doing good for the world, your community and yourself at the same time?Whatever your role at Vector, we’ll stretch you to find solutions for some of the world’s biggest challenges. And they don’t get much bigger than redesigning our energy future for a...
-
Senior Cyber Security Partner
4 days ago
Auckland, New Zealand Vector Limited Full timeSenior Cyber Security Partner (Governance, Risk & Compliance) Want to work somewhere where you are doing good for the world, your community and yourself at the same time? Whatever your role at Vector, we’ll stretch you to find solutions for some of the world’s biggest challenges. And they don’t get much bigger than redesigning our energy future for a...
-
Information Security Compliance Officer
2 days ago
Auckland, Auckland, New Zealand Aia Full timeJob DescriptionThe opportunity: As an Information Security Specialist - Standards and Policies, you will be responsible for ensuring the security and integrity of AIA's information systems and cyber environment. With a strong commitment to customer satisfaction, this permanent position will allow you to make a real impact in safeguarding our...
-
Risk & Compliance Analyst
15 hours ago
Auckland City, New Zealand Vista Entertainment Solutions Full timeWorking across the business you’ll identify and limit risks, collaborating with internal cross-functional teams to achieve effective and efficient operational risk management practices throughout the organisation. Focusing on technology, cyber and information security, you’ll manage various risk programmes of work, with primary responsibility for...
-
Security Specialist
3 days ago
Auckland City, New Zealand HAYS Full timeContract opportunity for a Security Specialist based in Auckland **Your new company**: Large organisation at the heart of Auckland aiming to improve Aucklander's welfare. **Your new role**: Security Risk Management - Provide security consultancy to business units and system owners, ensuring they have access to practical technical security expertise. ...
-
Compliance Risk Officer Specialist
3 days ago
Auckland, Auckland, New Zealand Auckland Transport Full timeJob DescriptionThe Risk & Assurance team provides support and oversight to ensure good governance across all Auckland Transport activities. This role will support the IT business in managing compliance requirements through audits and engagement with the business. It will also help manage risk exposure by ensuring risk identification, mitigation, reporting,...
-
Risk & Compliance Manager
7 days ago
Auckland City, New Zealand Tyler Wren Full timeExperience with RBNZ, ASIC, GICOP - 1LOD - Market related remuneration package with excellent benefits Tyler Wren is working with a leading insurer to attract a Risk & Compliance manager who will help build out the Risk & Compliance programme within the first line and engage in the risk and compliance uplift programmes. Support our clients' three lines of...
-
IT Security Assurance Specialist
3 days ago
Auckland City, New Zealand HAYS Full timeGreat opportunity for an IT Security Assurance Specialist. **Your new company** This enterprise invests in their employees' wellbeing, making sure they are satisfied with all aspects of work, no matter if you are a contractor or permanent employee. You will feel a sense of belonging doing what you love whilst continually learning and developing. This...
-
Risk Specialist
4 days ago
Auckland City, New Zealand Consult Recruitment Full timeFlexible and hybrid working - Permanent opportunity based in Auckland - Competitive salary + discretionary bonus + additional benefits **A little bit about the company** This organisation is a leading financial services company that provides award-winning products to Kiwis. They have a strong focus on supporting their communities, and offer flexible and...
-
Risk and Compliance Officer
1 week ago
Auckland City, New Zealand MMC Corporate Full time**Risk and Compliance Officer** **What can you expect?** - The primary purpose of this role is to provide advice and oversight of the business’s strategic and operational implementation and associated risk-taking activities. This includes Management of cyclical risk and compliance activities, oversight and analysis of core risk data to identify emerging...
-
Compliance and Risk Officer
2 days ago
Auckland, Auckland, New Zealand Cgr Services Full timeCgr Services is committed to maintaining the highest standards of security, privacy, and compliance as we scale globally. We are seeking a highly skilled Senior Global Security and Privacy Manager to join our team and play a critical role in achieving this goal.About the JobThis role is critical to ensuring that our organization remains a trusted partner for...
