Information Security Risk and Assurance Specialist

Apply Job no: AA4KP Flexi-time, flexi-locations, flexi-days, we do it all Fully subsidised medical and life insurance Great career development and long-term career opportunities. Information Security Risk and Assurance Specialist New Plymouth or Tauranga Permanent - Full-time At Powerco, we keep the lights on and gas flowing for over 1.1 million customers across some of the most beautiful parts of Aotearoa's North Island. We take pride in doing this safely, reliably, and efficiently. When supply is interrupted, we work hard to respond quickly so our customers can get on with their lives. About the Team Our Information Security team helps Powerco understand and manage risks associated with data, technology, and connected operational environments. Working across IT and OT, we partner with the business to make practical, risk-informed decisions that protect our systems, people, customers, and critical services. We combine cyber security, risk, and assurance expertise with the ability to translate complex concepts into clear business insights. As a collaborative and adaptable team, we support each other's growth and continuously improve security outcomes through people, process, technology, governance, and assurance. About the Role As our Information Security Risk and Assurance Specialist, you'll support Powerco's cyber risk, governance, compliance, and resilience programmes. Partnering with teams across the business, you'll help identify and manage cyber risks, assess control effectiveness, and contribute to assurance activities, risk reporting, policy development, incident preparedness, and continuous improvement across our IT and OT environments. You'll help Powerco remain cyber resilient by: Facilitating cyber risk assessments and workshops across business and operational environments. Supporting the development, maintenance, and reporting of cyber risk registers and risk treatment activities. Assisting with governance, compliance, internal reviews, audits, and assurance programmes. Supporting Powerco's Information Security Management System and continuous improvement activities. Helping develop and maintain security policies, standards, and supporting documentation. Providing practical, risk-based advice on security controls and improvement initiatives. Supporting operational resilience, incident preparedness, response planning, and recovery activities. Working with internal teams and external partners to support security outcomes across IT and OT environments. Contributing to security awareness, cyber education, and knowledge sharing across the business. About You You're a curious, organised professional who can work across business and technical environments and communicate cyber security risks clearly to diverse stakeholders. You may have experience in cyber security, risk management, compliance, assurance, audit, engineering, or a related field, with exposure to risk assessments or governance programmes. Experience in IT, Operational Technology, critical infrastructure, or regulated environments is beneficial, alongside a practical, collaborative, risk-based approach. We're looking for someone who brings: Experience in cyber security, risk management, compliance, audit, engineering, or a related discipline. Experience supporting or conducting risk assessments, reviews, audits, or assurance activities. Knowledge of cyber security frameworks such as ISO 27001, NIST CSF, AESCSF, IEC 62443, or similar. An ability to communicate effectively with both business and technical stakeholders. Strong interpersonal skills and a collaborative working style. Curiosity and a desire to continually improve information security practices and outcomes. Good organisation, attention to detail, and a process-oriented approach. A practical, risk-based mindset and the ability to turn cyber security requirements into workable business outcomes. Why Powerco? Be part of a supportive team where collaboration, continuous improvement, and making a real impact go hand in hand. Hybrid working and the flexibility to balance life and work your way Awesome benefits including 4% KiwiSaver, ability to purchase extra leave, paid volunteer days, great parental leave, and fully funded life and medical insurance for permanent employees Unlimited opportunities to grow - we've been recognised as one of Aotearoa's top employers for career development A culture built on backing each other, celebrating wins, and helping you thrive Applications If you're passionate about cyber security risk, assurance, governance, and resilience, and you want to help protect critical services for communities across Aotearoa, we'd love to hear from you. Applications close: 14 August 2026 Our ability to get the best out of people is what sets Powerco apart. We realise that candidates - especially from underrepresented and neurodiverse backgrounds - often won't apply for roles unless they meet ALL the criteria. We encourage anyone who shares our passion for connecting communities to apply for any role that aligns to your strengths and interests. We will provide a safe space where you can bring your whole self to work and thrive. If you would benefit from support or adjustments in order to participate equitably in the recruitment process, please phone 0800 769372 or email [email protected] Related documents Information Security Risk and Assurance Specialist - PD - 2026 Published on 29 Jul 2026, 10:19 PM