Information Security Risk and Assurance Specialist

Information Security Risk and Assurance Specialist

New Plymouth or Tauranga

Permanent - Full-time

At Powerco we keep the lights on and gas flowing for over 1.1 million customers across some of the most beautiful parts of Aotearoas North Island. We take pride in doing this safely reliably and efficiently. When supply is interrupted we work hard to respond quickly so our customers can get on with their lives.

About the Team

Our Information Security team helps Powerco understand and manage risks associated with data technology and connected operational environments. Working across IT and OT we partner with the business to make practical risk-informed decisions that protect our systems people customers and critical services. We combine cyber security risk and assurance expertise with the ability to translate complex concepts into clear business insights. As a collaborative and adaptable team we support each others growth and continuously improve security outcomes through people process technology governance and assurance.

About the Role

As our Information Security Risk and Assurance Specialist youll support Powercos cyber risk governance compliance and resilience programmes. Partnering with teams across the business youll help identify and manage cyber risks assess control effectiveness and contribute to assurance activities risk reporting policy development incident preparedness and continuous improvement across our IT and OT environments.

Youll help Powerco remain cyber resilient by:

• Facilitating cyber risk assessments and workshops across business and operational environments.
• Supporting the development maintenance and reporting of cyber risk registers and risk treatment activities.
• Assisting with governance compliance internal reviews audits and assurance programmes.
• Supporting Powercos Information Security Management System and continuous improvement activities.
• Helping develop and maintain security policies standards and supporting documentation.
• Providing practical risk-based advice on security controls and improvement initiatives.
• Supporting operational resilience incident preparedness response planning and recovery activities.
• Working with internal teams and external partners to support security outcomes across IT and OT environments.
• Contributing to security awareness cyber education and knowledge sharing across the business.

About You

Youre a curious organised professional who can work across business and technical environments and communicate cyber security risks clearly to diverse stakeholders. You may have experience in cyber security risk management compliance assurance audit engineering or a related field with exposure to risk assessments or governance programmes. Experience in IT Operational Technology critical infrastructure or regulated environments is beneficial alongside a practical collaborative risk-based approach.

Were looking for someone who brings:

• Experience in cyber security risk management compliance audit engineering or a related discipline.
• Experience supporting or conducting risk assessments reviews audits or assurance activities.
• Knowledge of cyber security frameworks such as ISO 27001 NIST CSF AESCSF IEC 62443 or similar.
• An ability to communicate effectively with both business and technical stakeholders.
• Strong interpersonal skills and a collaborative working style.
• Curiosity and a desire to continually improve information security practices and outcomes.
• Good organisation attention to detail and a process-oriented approach.
• A practical risk-based mindset and the ability to turn cyber security requirements into workable business outcomes.

Why Powerco

Be part of a supportive team where collaboration continuous improvement and making a real impact go hand in hand.

• Hybrid working and the flexibility to balance life and work your way
• Awesome benefits including 4% KiwiSaver ability to purchase extra leave paid volunteer days great parental leave and fully funded life and medical insurance for permanent employees
• Unlimited opportunities to grow - weve been recognised as one of Aotearoas top employers for career development
• A culture built on backing each other celebrating wins and helping you thrive

Applications

If youre passionate about cyber security risk assurance governance and resilience and you want to help protect critical services for communities across Aotearoa wed love to hear from you.

Applications close: 14 August 2026

Our ability to get the best out of people is what sets Powerco apart. We realise that candidates especially from underrepresented and neurodiverse backgrounds often wont apply for roles unless they meet ALL the encourage anyone who shares our passion for connecting communities to apply for any role that aligns to your strengths and interests. We will provide a safe space where you can bring your whole self to work and thrive.

If you would benefit from support or adjustments in order to participate equitably in the recruitment process please phone or email