Information Security Vacancies

**Do you agree that**:

- Security decisions made in the design phase are the best value?
- Good information security (INFOSEC) practices enable confidence?

Then it's an exciting time to join us The National Cyber Security Centre (NCSC) is the heart of Aotearoa New Zealand's cyber defence capabilities and every day we're helping protect Aotearoa, and its interests.

We have two newly established roles within the Office of the Chief Information Security Officer (CISO), GCSB - housed within the NCSC.

The Office of the CISO is accountable for delivering the INFOSEC strategy and programme for the GCSB and NZSIS, and ensuring that Information Security activities are designed and coordinated across the enterprise and in line with our INFOSEC principles.

These roles are a significant addition to the CISO team and are a unique opportunity to deliver advice and thought leadership and make a real difference. These roles offer broad responsibility, a high degree of engagement alongside technology practitioners and senior stakeholders with significant autonomy. You will contribute to senior management decision making, both within NCSC and the wider Intelligence Community.

**About the roles**:
Information Security Delivery Lead

As the Information Security Delivery Lead you will work closely with other experts from the Technology Directorate, Security Services Group and NCSC to provide expert guidance to support delivery of our INFOSEC transformation. Your primary purpose is to ensure that the information security programme and initiatives are well defined, planned and integrated into the enterprise.

**Be accountable for**:

- Planning and coordinating the delivery of the information security strategy and the operationalisation of the INFOSEC initiatives
- Leading the office of the CISO's understanding of security technologies and trends to identify deficiencies and recommend solutions
- Optimising the INFOSEC capabilities and services across the enterprise in a programme of continuous improvement

and
- Be a credible practitioner of cyber security tools and techniques
- Have a demonstrable record of delivering security initiatives within complex environments
- Be supportive and authentic in your approach to others
- Have a continuous improvement mind-set

Enterprise Information Security Architect

As the Enterprise Information Security Architect, you will work closely with other enterprise architects from Technology Directorate and will have access to technical and security specialists from the NCSC, Technology Directorate and Security Services Group.

Your primary purpose is to ensure that information security strategic intent and direction is translated into effective information security architecture.

**Be accountable for**:

- Planning the delivery of information security across the enterprise that is commensurate to the risks and aligned to appropriate INFOSEC standards
- Building architectural excellent through the design and maintenance of an effective information security architecture domain model
- Leading information security transformation and displaying behaviours that reinforce a strong security culture

**And be**:

- A credible practitioner of INFOSEC and or contemporary Security Architecture
- Able to work collaboratively and coordinate effectively with other teams
- Supportive and authentic in your approach to others
- Focussed in continuous improvement

The Office of the CISO has an established culture of trust and respect with our executive and colleagues. We work every day to protect our enterprise and its interest and know that our information security practices are imbued in the products and services we deliver.

Join us on our journey as we protect some of Aotearoa's most sensitive information.