Business Risk and Assurance Manager

At DEFEND, we are committed to delivering exceptional cyber resilience by providing strategic, engineered solutions alongside expert advisory services. Our goal is to empower organisations to safeguard their digital assets through innovative technology and best-in-class practices. The Business Risk & Assurance Manager is responsible for maintaining an effective GRC (Governance, Risk & Compliance) framework internally that ensures DEFEND is accountable, transparent, and responsible to all of its stakeholders, including customers, employees, and the wider community. Requirements Ensure DEFEND has robust security and privacy controls in place and meets it's regulatory and privacy requirements Maintain current company certifications like ISO and SOC 2 Maintain and uplift the enterprise risk and compliance framework and policies Oversee and coordinate enterprise risk management activities Complete customer, software, project, privacy and vendor/supplier risk assessments as required Integrate risk management into business processes Uplift and maintain data governance across DEFEND Maintain and update DEFEND policies and procedures at least annually Assist in the creation and delivery of the DEFEND cybersecurity roadmap Respond to internal cybersecurity and privacy incidents Regular reporting for ELT, Board and steering committee meetings Support business to implement policy and risk settings Deliver annual security and privacy awareness training to all staff You'll bring.. Good knowledge and experience in implementing of industry standards and regulations (e.g. ISO, NIST, GDPR, COSO) Strong understanding and experience of risk management framework and processes Good understanding of business governance functions and processes Leadership and communication skills to effectively communicate risks, requirements, and recommendations to stakeholders and team members Project management skills to manage GRC initiatives, prioritise tasks, and meet deadlines Collaboration skills to work with cross-functional teams and build relationships with internal and external stakeholders Ideally have experience preparing for and managing regular audits like ISO and SOC 2 Benefits Our dream at DEFEND is to improve everyday life by creating a cyber resilient world. Over the last few years, we've experienced phenomenal growth, working with a wide variety of customers and winning several industry awards, including Microsoft's Global Partner of theYear for 2025! Why DEFEND? We believe in investing in our employees' growth and providing them with opportunities to advance their skills and careers. We offer a collaborative workplace culture, and we are committed to fostering an inclusive environment where innovative thinking is encouraged. By joining our innovative and creative team you will have the opportunity to contribute a variety of cybersecurity outcomes, from culture & awareness of cyber resilience, through to offensive & defensive security. No matter what your role, everyone at DEFEND contributes towards our dream ofcreating a cyber resilient world. The benefits of working at DEFEND In addition to workingfor a growing, dynamic NZcompany, DEFEND offers the following benefits to all ourDEFENDers 3.5%Kiwisaveron top of your base salary Southern Cross Health Insurance coverage Mobile and Broadband discounts for yourself and family Flexible, hybrid work environment An allowance to contribute to your home office setup Access to EAP services to support youacross a range of wellbeing needs Diversity & Inclusion: At DEFEND, we celebrate a variety of perspectives and experiences. We know from experience that people from underrepresented groups often don't apply for roles they don't feel they meet all the criteria for. We're committed to creating an environment that enables all our team to thrive. If you think you have what it takes, but don't check every single box, please consider applying. We'd love to hear how you might contribute to the team and being our next DEFENDer. #J-18808-Ljbffr