IT Security Governance Specialist, Auckland

We are offering a talented individual a 12-month fixed-term opportunity to work at Tower. Why You'll Love Working with Tower At Tower, our values are central to every interaction. We prioritize our people, fostering a diverse and inclusive environment where everyone can thrive. We encourage you to bring your whole self to work, representing the vibrant communities we serve. We celebrate all ages, genders, sexual orientations, races, religions, and everything else that makes our culture unique. Proud holders of the Rainbow and DV Free Ticks, we are committed to inclusivity and safety.We aim to lead our industry into a customer-centric future with innovation and disruptive thinking. As a unique Kiwi and Pacific insurance provider with over 150 years of history, our roots trace back to Dunedin. What you will be doing Reporting to the Head of Information Security, you will assist, support, monitor, and manage Tower's cyber risk appetite while improving cyber awareness among staff.Responsibilities include: Identify new cyber, IT, and information risks, leading mitigation plans and resolution activities Lead compliance reporting for internal and external audits Assist in developing and operationalizing cybersecurity frameworks to meet legal and regulatory requirements Conduct cyber risk assessments on new vendors and servicesLead the vulnerability management working group across the Technology group Analyze and track security threat intelligence and vulnerability feeds Identify and advise on vulnerability remediation, including overseeing third-party penetration testing and simulations Contribute to security strategy development and planningAdvise business and technology teams on security best practices for pipelines, infrastructure, and applications What you'll need 3-5 years' experience in information security or IT risk roles Certifications such as CISM, CISSP, CRISC, or other security vendor training certifications Understanding of security risk management and compliance frameworksKnowledge of IT security technologies, products, and processes Understanding of industry standards (e.g., ISO, PCI, NIST) Technical knowledge of operational tools like SIEM, Email&Web content filtering, WAF, Endpoint Detection&Response, Vulnerability Scanning, CASB, Threat Emulation, Penetration Testing, and Microsoft 365 Experience managing risks associated with IaaS/PaaS/SaaS services Excellent verbal and written communication skills Our Commitment We encourage everyone to bring their whole selves to work, embracing diverse opinions, experiences, and backgrounds. We aim to create an inclusive workplace where our people feel valued, safe, and respected. Please let us know early in the process if you are comfortable sharing this information.What we'll bring to the table Alongside a competitive salary, we offer various perks and benefits to support our Tower employees. Highlights include: 22 days of annual leave Access to Tower products Eligibility for Employee Assistance Programs Flexible workplace opportunities at our modern Fanshawe St office with amenities like stand-up desks, open spaces, and coffee machines in large kitchens with cafe-inspired dining areasApply now: Ready to embark on a journey where your experience matters in New Zealand and the Pacific's insurance industry? Submit your resume and a detailed cover letter highlighting your impactful career. We are eager to find the right person quickly; applications are reviewed as they come in, so don't wait—apply now to be considered.#J-18808-Ljbffr