Senior Technology Specialist

Senior Technology Specialist (L3) - Enterprise Design & Integrity, Information Security
We are seeking a Technology Specialist (L3) to join our CISO office to help achieve our outcomes.
Ara Whiwhi Mahi - The Opportunity
In line with Inland Revenue's Information Security Strategy safeguard the integrity of the tax system by building on the existing IR fraud management processes, enable effective collaboration across IRs current fraud management practices that include IR people, processes and technologies.
**In this varied role you will be responsible for the following**:

- Demonstrating IR's values through your behaviours and decisions to positively contribute to the economic and social wellbeing of New Zealand
- Build and maintain an understanding of IR and customers to deliver services to meet current and future needs
- Provide specialist support, advice and services relating to specialised domain issues across the organisation to inform quality decision making
- Within your area of expertise, provide advice and guidance in support of organisational capability uplift and better customer outcomes
- Support the development of cohesive security management practices and outcomes
- Support and Identify emerging trends and provide thought leadership to support the development of innovative customer solutions
- Support efforts to strengthen enterprise architecture, solid understanding of technologies, trends, exposure with artificial intelligence and threat management/landscape
- Support and contribute towards the security strategy outcome, by providing innovative ways to uplift and resolve complex problems to reduce risks
- Any other activities within the CISO office that needs support to meet outcomes

Mōu - About you
To be successful in this position you will possess the following capabilities:

- Identify development opportunities and build individual and organisational capability by taking a system-wide view, collaborating across IR
- Exceptional analytical skills to make complex technical decisions that have strategic significance to support the right outcomes for customers, IR and the government
- Identify strategic risks and contribute to the development of policies and strategies to ensure quality customer experiences and protect IR's integrity
- Ability to work collaboratively in a networked internal model to ensure timely and quality assured delivery of solutions
- Lead, plan and execute projects or initiatives including across networked teams, taking accountability for stakeholder management and project communications with your exceptional communications skills and inherent leadership qualities
- Good understanding of regulatory compliance standards and frameworks such as NIST 800, NIST Frameworks, ISO 27001, ISO27002, ISO27005 and NZISM
- Vast Knowledge and experience in cloud infrastructure and security outcomes, with proven ability in building security architecture around enterprise capabilities
- Knowledge and experience in penetration testing process, remediation, mitigating controls
- Deep understanding of information security principles and risk management concepts around systems, people, assets, data, capabilities and cyber across managed services business, with a sound knowledge in supply chain security management practice
- Solid understanding of identity and access management technologies and outcomes
- Comprehensive experience in implementation secure by design and secure by privacy principles

Mō mātou - About us
The Information Security Office provides assurance to the Executive Leadership Team, the public, key stakeholders, and government officials that we are meeting the Government's security priorities and are keeping Inland Revenue safe. With our future focus on security strategies and the implementation of them with a 'security by design' approach, we facilitate cultural change where security risk is not seen simply as an ICT issue but as a value-add activity to protect IR's customers, people and partners through building strong security awareness, enabling our IR workforce to evolve from passive users into a team of security champions in a fast-moving digital environment.
Our team actively manages risk through Certification and Accreditation (C&A) of critical information assets and publicly facing systems. We ensure that IR adopts robust security practices and designs by following sound security architecture and development principles at appropriate times during the change lifecycle. This provides early warning of security vulnerabilities and threats through excellent visibility of our environment and what is happening to it at any time. We are the nucleus of the IR Security Network with the responsibility to provide oversight and coordination of security related activities across the enterprise. This network is enabled through formal governance but is also highly reliant on effective interpersonal relationships across IR and our partners.
Applications close at 5pm on Sunday, 2