We are seeking an experienced Cyber Security Architect to join an established security assurance team in Wellington on a 10-month contract.

This is an excellent opportunity for a security professional with strong New Zealand Government experience to contribute to the certification and accreditation of existing information systems, while also providing security expertise across a range of projects as required.

About the Role

You will play a key role in security assurance activities, assessing information systems, identifying and managing cyber security risks, validating security controls and supporting certification and accreditation requirements.

You will work closely with both technical and non-technical stakeholders, providing practical security advice and translating complex technical information into clear, actionable recommendations.

Key Responsibilities

• Perform certification and accreditation activities for existing information systems.
• Review information system designs and architecture from a security perspective.
• Develop and maintain Security Risk Assessments (SRAs) and Control Validation Plans (CVPs).
• Conduct Security Control Effectiveness Audits and assess control evidence.
• Identify cyber security risks and develop pragmatic remediation plans.
• Review and assess penetration testing results where required.
• Communicate audit findings, risks and remediation recommendations to stakeholders.
• Prepare clear and concise memoranda, reports and supporting certification documentation.
• Provide security consulting and advice to project teams as required.
• Promote Secure by Design principles across project delivery.
• Contribute to technical designs, architecture documentation and security standards.

About You

We are looking for someone with:

• Detailed knowledge of the NZISM Certification and Accreditation (C&A) process within New Zealand Government organisations.
• Proven experience conducting Security Risk Assessments within a New Zealand Government environment.
• Strong understanding of business and technical contexts when assessing information system risks.
• Experience identifying cyber security risks, assessing likelihood and impact, and recommending appropriate security controls.
• Proven experience developing Control Validation Plans (CVPs).
• Experience conducting Control Validation Audits (CVAs), including evidence collection and assessing control effectiveness.
• Experience developing Security Risk Management and remediation plans.
• Strong written and verbal communication skills, including the ability to communicate complex technical concepts to non-technical audiences.
• Experience preparing professional memoranda, reports, technical standards and security documentation.
• Experience contributing to technical designs and architecture documentation.

What You'll Bring

You will be a pragmatic and collaborative security professional who can operate confidently across technical, business and governance environments. You will be comfortable working independently, managing competing priorities and providing clear, practical security recommendations.

Experience working within New Zealand Government security frameworks and environments is essential.

Key Details

• Role: Cyber Security Architect
• Location: Wellington
• Contract: 10 months
• Utilisation: 100%
• Start: ASAP
• Additional opportunity: Potential to support other projects and security initiatives as capacity allows.