IT Risk Analyst

Create a risk-driven culture for making better informed risk decisions
- Fast paced role for an adaptable, autonomous and outcome driven role
- Auckland or Wellington based with generous work from home options

Be a part of a dynamic, purpose driven and passionate Cybersecurity Team, wherein you will play a pivotal role.
Mō te Tukurau Aotearoa - About NZ Post
NZ Post has been a vital link for New Zealanders for over 170 years, and in the future, we will continue to be a trusted Kiwi company that helps customers succeed and helps New Zealand grow. We're currently on a journey of change designed to support our transformation strategy to deliver customer driven technology solutions, with greater speed to market and keeping pace with emerging technology.
This newly created role will be a key contributor in the IT Risk and Security team with the primary focus on delivering better business and technology outcomes through implementation and ongoing improvement of currently established proactive risk management framework and process.
Kōrero mō te tūranga - About the role
This role will require the individual to work with key stakeholders within NZ Post to ensure that risks within their areas of responsibilities are proactively identified and managed. The IT Risk Analyst will play a key role in ensuring that the wider Data and Technology business area adopts and embraces a risk-driven culture for making better informed risk decisions.

**Key aspects of this role include**:

- Monitoring and maintaining the Data and Technology business area risk register
- Supporting risk management processes and procedures
- Enforcing a risk-aware culture
- Conducting risk assessments of new services/solutions/platforms and technologies
- Conducting third party security and risk assessments
- Developing, monitoring and reporting on key risk indicators

This is a fantastic opportunity to be a part of a dynamic, purpose driven and passionate Cybersecurity Team. You'll play a pivotal role in implementing the risk management process to improve the security posture of NZ Post assets to mitigate risks and ensure ongoing sustenance of implementation of NZ Posts' Information Security Governance Framework.
Mōu - About you
We move fast at NZ Post Cybersecurity, so people who are adaptable, autonomous, problem solvers and love to deliver outcomes thrive in our team and within the organisation. Automation of risk management process, measurement, and monitoring of key risk indicators, reporting to key stakeholders at various levels and hierarchy will be imperative.
You'll have a minimum of 5 years behind you working in an IT Security, Enterprise Risk Management and Assurance practice, with at least 2 years specialising in a Senior IS role. You will also have:

- Professional Accreditations (e.g., CRISC, CISSP, CISA) or equivalent professional IT experience with significant security experience
- Knowledge industry standards and guidelines including ISO 27001/2, ISO 31000, PCI-DSS, NIST-CSF, NIST SP 800-37 among others.
- Minimum of 2 years working with Cloud based security controls

Your excellent communication, collaboration, stakeholder management and prioritisation skills are important to ensure risk priorities are clearly identified, championed, and delivered.
What's in it for me?
This really is your opportunity to make your mark in newly created role and work with an experienced and very supportive team.
We offer a competitive salary package which includes a 4% KiwiSaver contribution, 22 days annual leave, and medical care for you and your family. You are encouraged to be autonomous in how you deliver so you can achieve a work & life balance tailored for you.
And, there are career development opportunities across the NZ Post group - we proactively source talent from within.
Interested? Come join the Whanau

There's something really special about being part of the team here at NZ Post - Tukurau Aotearoa, who we are and what we stand for is grounded in our values.
We are proud to be Rainbow Tick certified and recognise the diversity and uniqueness of our workforce and reaffirm our commitment to create a safe and inclusive environment for everyone.