TR Principal Information Security Consultant

Principal Information Security Consultant

• Provide principal level Information Security leadership across Auckland Council
• Influence enterprise wide security strategy, solution design and risk decisions
• Lead and develop a team of Information Security Consultants

He angitūtanga: The opportunity

Auckland Council’s CISO Office has an opportunity for a highly experienced Principal Information Security Consultant to take a leading role in shaping security across one of New Zealand’s largest and most complex technology environments.

Reporting directly to the Chief Information Security Officer, this is a senior and influential position providing enterprise wide leadership across Information Security advisory, assurance and solution design. You will operate as a key technical authority, guiding critical security decisions and providing trusted advice and constructive challenge to senior leaders, technology specialists and delivery teams.

You will lead and coach a team of Information Security Consultants who support projects, agile release trains and operational teams. Through this team, you will ensure security considerations and controls are embedded throughout the design and delivery of new capabilities and services.

You will provide direction on the most complex and high risk security matters, helping stakeholders navigate competing priorities and make informed decisions that remain within Council’s risk tolerance. You will also influence Auckland Council’s Information Security Strategy, roadmap, policies, standards and control environment.

Key responsibilities will include:

• Providing principal level thought leadership and technical direction across Information Security

• Leading, coaching and developing a team of Information Security Consultants

• Acting as a trusted advisor to the Chief Information Security Officer and other senior stakeholders

• Providing expert guidance and constructive challenge on complex solution designs, security risks and strategic decisions

• Acting as the senior escalation point for complex security incidents, change requests and advisory matters

• Setting expectations for the quality and consistency of Information Security advisory and assurance services

• Guiding the application of security principles and controls across projects, agile release trains and operational teams

• Coaching consultants to undertake robust risk assessments in support of the GRC function and ICT Risk Register

• Influencing the development and implementation of Information Security strategy, roadmaps, policies, standards and guidelines

• Building trusted relationships with senior leaders, technology specialists and stakeholders across Council

• Strengthening Information Security capability and awareness through engagement, education and knowledge sharing

He kōrero mōu: About you

You are a highly accomplished Information Security leader with the depth of expertise and professional credibility to influence complex technology and business decisions at an enterprise level.

You bring extensive experience across security consulting, assurance and solution design, supported by a strong understanding of how security principles should be applied within complex technology environments. You can provide clear direction where risks, requirements and solutions are not straightforward.

Alongside your technical expertise, you are an effective people leader who can coach experienced consultants, build capability and establish consistently high standards. You are confident engaging with senior leaders and specialists, providing challenge when required and translating complex security matters into clear, practical advice.

We will be looking for:

• At least 10 years of experience in Information Security, including five or more years in a senior security design or consulting position within a large, complex or politically sensitive organisation

• Extensive experience providing high level Information Security advisory and assurance services within medium to large organisations

• Demonstrated ability to provide enterprise wide technical leadership and influence significant security and technology decisions

• Deep knowledge of solution design practices and the application of Information Security principles and controls

• Proven experience advising senior leaders and stakeholders on complex security risks and mitigating actions

• Strong leadership, coaching and capability development experience

• Current knowledge of Information Security trends, cloud services and cyber technologies

• Strong business acumen and the judgement to balance security requirements with practical delivery considerations

• Exceptional communication, influencing and relationship management skills

• A delivery focused mindset and a sound understanding of Agile delivery methods

• A relevant tertiary qualification in Computer Science, Information Technology, Law or a related discipline, an equivalent industry qualification, or extensive relevant experience

Ngā āhuatanga kei a mātou: What we offer

This is a rare opportunity to hold a highly influential Information Security position within one of New Zealand’s largest and most diverse organisations.

You will have the scope to influence enterprise wide security direction, guide complex technology decisions and develop a team of experienced Information Security professionals. Your leadership will directly support the secure delivery of services and capabilities that make a meaningful difference for Auckland and Aucklanders.

We honour Te Tiriti o Waitangi, value te ao Māori, support kaitiakitanga and are responsive to the needs of Māori. You will support the development of confidence and capability across te reo Māori, tikanga Māori, te ao Māori and Te Tiriti o Waitangi, helping our people contribute to Māori outcomes for and with Māori.

Tono mai: Apply now