Cyber Security Architect - GRC

Jora New Zealand will close on 9th September 2026. Thank you for being with us, we are cheering you on as you continue your career journey. Beyond Recruitment - Wellington, North Island About the Role Our client, a large public sector organisation, is seeking an experienced Cyber Security Architect - GRC to support a major security assurance and system recertification programme as part of the Enterprise Security Assurance Programme. Working within an established cyber security team, you will be responsible for conducting security reviews, risk assessments, control validation activities, and certification and accreditation processes across a portfolio of critical information systems. This is an ongoing programme of work focused on ensuring systems remain compliant with government security standards and frameworks. The successful contractor may also contribute to a range of security initiatives and project‑based engagements as capacity allows. Key Requirements Strong understanding of the NZISM Certification and Accreditation (C&A) process within New Zealand Government organisations. Proven experience conducting Security Risk Assessments, including understanding business and technical contexts, developing risk statements, assessing likelihood and impact, and recommending appropriate security controls. Experience developing and maintaining Control Validation Plans (CVPs). Hands‑on experience performing Control Validation Audits (CVAs), including evidence collection, assessment, and effectiveness ratings. Experience developing Security Risk Management and remediation plans, with the ability to communicate risks and recommendations clearly to stakeholders. Excellent written and verbal communication skills, including the preparation of reports, memoranda, technical documentation, and security standards. Ability to translate complex technical concepts into language suitable for business audiences. Experience reviewing technical designs and architecture documentation from a security perspective. Strong stakeholder engagement skills, with the ability to work effectively across business and technology teams. Key Responsibilities Perform certification and accreditation activities for existing information systems. Review system designs and architectures to assess compliance with security requirements. Develop, review, and maintain security artefacts, including Security Risk Assessments and Control Validation Plans. Conduct security control effectiveness reviews and audits. Develop pragmatic remediation plans and risk treatment strategies. Review and assess penetration testing outcomes and coordinate remediation activities where required. Prepare clear and concise certification and accreditation recommendations for decision‑makers. Provide security consulting services to project teams and champion Secure by Design principles. Support projects in achieving certification and accreditation through the development of required NZISM security artefacts and supporting documentation. What's on Offer? 10-month contract opportunity. Full-time engagement. Based in Wellington. Immediate start available. Competitive contract - rate up to $150 per hour. Opportunity to contribute to high‑profile security assurance and compliance initiatives within a complex enterprise environment. To be considered, you must be based in New Zealand and have the legal right to work. #J-18808-Ljbffr