Kaitātari Mana Whakahaere Tūraru ā-ipurangi Grc Security Analyst

Kaitātari Mana Whakahaere Tūraru ā-ipurangi GRC Security Analyst

Full-time

**Company Description**:
Z has a clear purpose: Powering better journeys, today and tomorrow. As one of New Zealand’s largest transport energy companies, we have a commitment to delivering safe, secure, and reliable transport energy - with the opportunity to deliver new journeys, with new energy solutions in a changing world.

We are proud to be the Kiwi contingent in the Ampol Group, an independent Trans-Tasman energy company, with trading offices across the globe, which are united behind our shared purpose. While many of the challenges and opportunities we face go beyond national boundaries, together we have the scale, influence, and capability to deliver for our customers, communities, and our people.

The Cyber, Risk & Governance teams' purpose is to protect Ampol Group’s reputation and social license to operate by enhancing our cyber resilience. We support Ampol Group in achieving its business goals by managing cyber and IT risks effectively and pragmatically and by adopting a proactive approach. We enable business value rather than being a barrier. Through early detection and response to cyber events, we mitigate risks and deliver business value in the face of ever-changing technologies and strategic opportunities. Additionally, we build trust in Ampol with our customers through the delivery of more secure solutions.

As a GRC Analyst, you’ll be supporting the cyber security governance, risk and compliance processes across The Ampol Group, including IT suppliers, outsourced providers, and internal IT environments. Assessing, aligning, and testing security controls to meet regulatory obligations and industry best practices.

**This role is a 12 Month Fixed Term Contract**

You will have the opportunity to:

- Develop and update the current cyber security policy and standards
- Conducting cyber risk assessments, reviewing standards and policies, performing compliance audits, and preparing detailed risk and compliance reports
- Support Risk Mitigation and remediation efforts
- Developing compliance metrics and reporting

**Qualifications**:
What you’ll bring to Z:

- A sound knowledge of industry environments, architecture, technologies, and IT services with a strong cyber risk management expertise in identifying, assessing and evaluating cyber and information risks in technology landscape.
- Good stakeholder engagement skill, with the ability to create consensus amongst key stakeholders with different views to establish a shared approach within Ampol
- Strong planning, prioritisation, organisational skills and the capacity to be flexible in balancing priorities to meet/exceed customer needs.
- Proven expertise in governance, risk and compliance either internally or from a consulting or assurance professional service firm.
- Demonstrated expertise and experience in industry regulations (e.g., Critical Infrastructure Act 2018, Privacy Act 1988), industry standards (e.g., PCI DSS), and risk and control frameworks (e.g., NIST CSF, ISO 27001).
- Proven expertise in the use of project management methodologies to assist teams in meeting deadlines and agreed outcomes.

And of course, you’ll be passionate about what matters to Z, embracing and living our values to help us deliver on our aspirations and broader commitment to Aotearoa New Zealand.

**Additional Information**:
What we can offer you:

- A competitive remuneration package including short-term incentive plan, medical insurance for you and your family, enhanced employer contribution for KiwiSaver
- Generous leave provisions including enhanced sick leave, parental leave benefits and the option to buy additional leave
- The balance of hybrid working, enjoy some of your week at home and some in our welcoming office space
- The opportunity to contribute and be part of a supportive team that is here to make a difference
- A chance to build your own capability through learning from some of the industry’s most knowledgeable people who have a desire to share their insights along with access to upskilling opportunities and career development across the organisation
- Two days a year to do Good in your Hood, though our volunteering scheme, a chance for you to help others in your community in a meaningful way to you

The base salary range for this role is $121,000 - $150,000 per annum, plus 15% STI based on company performance, a 5% KiwiSaver employer contribution and health insurance through Southern Cross.

Why Z?

Z has always been a proud Kiwi company. We’re aspirational for our future, confident of our role in Aotearoa New Zealand’s success and deeply loyal to our customers, communities and people. At Z we focus on achieving extraordinary outcomes by setting the appropriate context, rather than by telling our people what to do. By doing this, high performing and talented people deliver better results and are more personally fulfilled.

We care deeply for our people while pushing the