Compliance & Risk Specialist

He angitūtanga: The opportunity

Auckland Council is seeking an experienced Compliance and Risk Specialist to join our Information Security team within Technology Services.

This is an opportunity to play a key role in strengthening Auckland Council's information security governance, risk, and compliance capability across one of New Zealand's largest and most complex technology environments.

Working closely with technology teams, delivery portfolios, and business stakeholders, you will provide expert guidance on security risk and compliance obligations, helping to ensure risks are identified, assessed, managed, and reported consistently across the organisation. You will also contribute to the ongoing evolution of our security governance framework by developing standards, supporting compliance activities, and providing assurance that Council continues to meet its information security obligations.

This role is well suited to a security professional who enjoys balancing governance with practical delivery and can build trusted relationships across both technical and business teams.

Ngā kawenga matua | Key responsibilities

In this role, you will:

• Provide trusted advice on information security governance, risk, and compliance across projects, Agile Release Trains, and operational technology teams.
• Lead and facilitate information security risk assessments and support the ongoing management of the Technology Services Risk Register.
• Monitor, assess, and report on compliance with Auckland Council's information security policies, standards, and regulatory obligations, including industry frameworks such as PCI DSS.
• Develop and continuously improve information security policies, standards, and governance artefacts to support changing organisational and regulatory requirements.
• Partner with stakeholders to ensure security risks are identified early and appropriate mitigation strategies are implemented.
• Support the delivery of Auckland Council's Information Security Strategy, governance initiatives, and control framework.
• Respond to information requests from LGOIMA and Integrity teams, including undertaking content and email searches where required.
• Promote a pragmatic, risk based approach to information security across Technology Services.

He kōrero mōu | About you

You are an experienced governance, risk, and compliance professional who can translate complex security requirements into practical guidance. You are confident influencing stakeholders, comfortable working across both technical and business environments, and bring a collaborative approach to managing risk while enabling delivery.

You will bring:

• At least five years' experience in Information Security, with a strong focus on governance, risk, and compliance.
• Demonstrated experience delivering GRC advisory and assurance services within large, complex organisations.
• Sound knowledge of information security frameworks, risk management methodologies, and compliance obligations.
• Experience working within Agile delivery environments and understanding how governance supports modern technology delivery.
• Excellent stakeholder engagement, communication, and influencing skills.
• Strong analytical and problem solving capability, with the ability to apply sound judgement and a pragmatic approach to risk.
• A tertiary qualification in Information Technology, Computer Science, Law, or a related discipline, or equivalent industry experience.

Ngā āhuatanga kei a mātou | What we offer

At Auckland Council, you'll be part of a collaborative and high performing Information Security team responsible for protecting critical technology services that support more than 1.7 million Aucklanders.

We offer meaningful work, opportunities to develop your career, flexible working arrangements, and a comprehensive range of employee benefits, including wellbeing initiatives, professional development, and discounted health and lifestyle benefits.

You'll have the opportunity to contribute to the security and resilience of one of New Zealand's largest technology environments while working alongside experienced security professionals committed to continuous improvement.

Tono mai | Apply now

If you're looking for an opportunity to influence information security governance and help strengthen the security posture of one of New Zealand's largest organisations, we'd love to hear from you.