Senior Advisor, Digital Assurance

Job Type: Permanent
- Location: Wellington, NZ

**Help shape the future of Education**
- We work to _**_shape _**_an _**_education _**_system that delivers _**_equitable_**_ and _**_excellent outcomes_**

Our organisation is made up of talented and committed people around Aotearoa, from a wide range of backgrounds and cultures. While we work in different groups and on different things, we all strive every day to make the biggest difference we can for our students in our education system.

**About this role | Mō tēnei tūranga**

This is a full-time role based in Wellington.

You will take the lead in planning and delivering risk-based security assessments, managing certification and accreditation (C&A), and guiding project teams, risk owners, and vendors in the identification and mitigation of cyber risks. You’ll play a critical role in ensuring our digital ecosystem is safe, resilient, and aligned with both NZISM and best practices.

This role will also see you supporting continuous improvement across digital security frameworks, contributing to a variety of work programmes, and playing an active part in the Ministry’s ICT governance and risk processes. You’ll work closely with internal stakeholders, external vendors, and assurance bodies to ensure compliance, build capability, and support the ongoing evolution of secure, trusted digital services.

**About you | Mōhou ake**

You’re an experienced and thoughtful cyber security assurance professional with a track record of pragmatic leadership and technical credibility. You enjoy working collaboratively across complex organisations, balancing standards and compliance with practical, fit-for-purpose solutions.

Skills and Experience
- In-depth knowledge of NZISM, NIST, ISO 27001, COBIT, and CIS Controls.
- Skilled in security control validation and supporting self-assessment activities.
- Experience managing cyber supply chain risk and vendor security assurance.
- Ability to create risk reports, statements of work, and business cases for stakeholders.
- Proven track record of experience influencing and advising senior stakeholders, risk owners, and delivery teams.
- Experienced in monitoring and responding to evolving cyber threats.

Qualifications and Attributes
- Relevant tertiary qualification or industry certifications such as CISSP, CSIM, CISA (or equivalent).
- Excellent interpersonal and communications skills. Able to coach, influence, and explain technical matters to a range of audiences.
- Collaborative mindset, working with product managers, delivery leads, and risk owners.
- A growth mindset with a strong desire to lead continuous improvement and uplift security maturity.
- In-depth understanding of the public sector security landscape including the Protective Security Requirements (PSR).
- Recognised as a trusted cyber security advisor.
- The ability and willingness to adhere to the Public Service Standards of Integrity and Conduct

We’re a collaborative, supportive team that takes pride in the quality of our work and the trust we’ve built across the organisation. You’ll join a well-respected group where your expertise is valued, and where flexibility, balance, and professional growth are part of everyday life. With a wide variety of work on offer and plenty of development opportunities, you’ll always have others alongside you to share ideas, tackle challenges, and celebrate successes.

**About our group and team | Mātau rōpū ake**

Matihiko | Digital leads the Ministry’s technology strategy, overseeing digital services, driving the cross-agency _Connected Ako_ strategy, enabling system-wide digital investment, and aligning with government digital and data best practices.

Its two core responsibilities are:

- Operating a secure, resilient digital environment for the Ministry, including networks, devices, tools, and data infrastructure.
- Managing digital services that support the education sector’s funding, enrolment, assessment, identity, and school network needs.

The Digital Assurance function is responsible for developing and implementing the strategy, priorities and work programme to ensure that the Ministry’s digital and data assets and services are well managed, risks are understood and controlled, and that requirements for Information Security are met.

**Are you ready to make a difference? | Kua rite koe mō tēnei mahi?**

If this opportunity interests you, please submit your cover letter and resume by using the ‘apply' button. In your cover letter we’d like to know about you, your values, or anything else you’d like to share. We’re keen to understand your motivations, strengths, transferable skills, and the diverse perspectives you will bring to the role.

**Applications close Midnight Monday 23 June 2025**
- We want our people to feel valued for their unique qualities and have a sense of belonging. If you require assistance or adjustments to fully participate in the recruitment process, please let us know._