ICT Risk and Assurance Lead
Core
Lead ICT risk and assurance practice for New Zealand's National Grid, managing risk assessments, assurance schedules, and executive reporting across IT, OT, and cloud environments.
Role type
Senior IC ICT Risk and Assurance Lead
Builds
ICT risk and assurance frameworks, bowtie-based risk models, and security control effectiveness reports
Domain
Energy utilities / Critical infrastructure / ICT Security
Required skills
ICT risk and assurance framework development, bowtie-based risk modeling, regulatory compliance, stakeholder engagement, executive reporting, security control assessment
Preferred skills
NIST, ISO 27001, CIS Controls, IEC 62443, critical infrastructure experience, utilities experience
Technologies
NIST, ISO 27001, CIS Controls, IEC 62443
Responsibilities
Manage assurance schedule and facilitate regular reviews of risk controls, develop and maintain bowtie-based risk models, prepare executive reporting on risk exposure and compliance, develop ICT risk management policies and standards, engage with auditors, regulators, and industry partners
Seniority
Senior, hands-on IC with leadership