Security Engineer

Haere Mai! Ko ia kāhore nei i rapu, tē kitea - A person who does not seek will not find. We are the Kaitiaki / Guardians of New Zealand Superannuation. We are proud of our Te Whāinga / Our purpose: Sustainable investment delivering strong returns for all New Zealanders. We invest government contributions to the NZ Super Fund, a global investment fund helping to ensure the country can pay for the growing cost of universal superannuation (New Zealand Superannuation) in the future. We also oversee the Elevate Fund, which invests in small, fast-growing New Zealand companies. At the Guardians there’s an energy, passion and a shared commitment to excellence: in 2024 the NZ Super Fund was named the world’s best-performing sovereign wealth fund. The work is complex, innovative and intellectually stimulating. Sustainable finance, including a commitment to being net zero by 2050, is core to our Mātāpono / way of working. The RoleAs a Security Engineer, you'll play an important role in protecting the technology platforms and services that underpin the organisation's work. As technology evolves to unlock greater value through modern platforms, data, AI and automation, this role is integral in ensuring innovation is supported by robust security controls, effective risk management and resilient infrastructure. With a collaborative, high-performing culture, the organisation brings together specialists from across investment, technology and corporate functions to deliver meaningful outcomes. With a highly skilled and experienced leadership team, the Technology function is evolving to strengthen its core platforms, improve how technology services are delivered, and enable the safe, scalable adoption of AI. Security plays a critical role in this evolution, ensuring innovation is supported by the right technical controls, effective risk management and resilient platforms. It's an opportunity to contribute to a purposeful organisation, work alongside experienced technology professionals and help shape a secure technology environment built for the future.

What you'll be doing day-to-day: - Operate and continuously improve cyber security controls across cloud, infrastructure, networks and related technology services

• Monitor security alerts, events and vulnerabilities, ensuring risks are investigated, prioritised and remediated in a timely manner
• Maintain secure configurations and technical controls across Microsoft Azure, Microsoft 365, identity and access management, network security and endpoints
• Support effective risk management through clear security measures, KRIs, KPIs, control evidence and improvement actions
• Coordinate the delivery of security services with managed service providers and technology partners, ensuring clear accountabilities and effective outcomes
• Strengthen platform resilience through vulnerability management, patching, configuration management, monitoring, testing and recovery readiness
• Investigate suspicious activity and support incident response, containment, recovery and lessons learned
• Ensure security controls are in place to support AI and automation workloads, including access, data protection, monitoring, resilience and production support
• Maintain security standards, procedures and technical documentation, supporting assurance reviews, audits and security testing
• Work collaboratively with platform, architecture, technology risk and business teams to support the secure delivery of new and changed technology services

You'll bring to the role:- Experience operating and improving cyber security controls within complex cloud, infrastructure or network environments

• Hands-on experience across cloud and network security, identity and access management, vulnerability management, security monitoring and incident response
• Experience securing modern Microsoft environments, ideally Microsoft Azure and Microsoft 365
• A proven ability to analyse security alerts, vulnerabilities and technical risks, and coordinate effective investigation and remediation
• Experience working with managed service providers, technology vendors and internal teams to deliver secure and reliable outcomes
• A strong understanding of cyber security risk, operational controls, privacy, compliance and assurance requirements
• A proactive risk management mindset, with the ability to identify and address vulnerabilities, control gaps and emerging threats
• Strong analytical and problem-solving skills, sound judgement and attention to detail
• The ability to manage competing priorities, collaborate effectively across teams and communicate technical security matters in plain English
• A practical understanding of security automation and scripting, alongside a commitment to operational discipline and continuous improvement

Within your first year, you'll have helped ensure cloud, infrastructure and network security controls are operating effectively, with vulnerabilities and control gaps identified and remediated promptly. Security monitoring and incident response will be consistent and well managed, with risks, control effectiveness and improvement actions clearly visible. Technology partners will be aligned and delivering against agreed expectations, while platforms are secure and ready to support the organisation's evolving AI and automation capabilities. Technology leadership will have confidence that security risks are actively managed and the right controls are in place to support innovation, resilience and sustainable business outcomes. What we offer - A dynamic, exciting place to work with a team united by our common purpose of sustainable investment delivering strong returns for all New Zealanders.

• Competitive remuneration package including base salary, discretionary bonus programme, and up to 8% KiwiSaver matching.
• World class professional development, career pathways and job rotation opportunities.
• Comprehensive leave and benefits programme including strong parental leave package and insurance cover.
• Flexible and accessible work environment that reflects our commitment to equity and an inclusive team.

How to apply: We encourage and welcome your interest in joining the Guardians. We are committed to diversity, equity and inclusiveness, recognising transferable skills, discussing flexible work options and/or specific disability needs at any stage of this recruitment or employment. As a proudly committed equal opportunity employer, we challenge discrimination and actively work to eliminate bias in our hiring practices. Diversity of experience and diversity of background help us to solve complex problems and deliver on our purpose.

We recognise the importance of Te Tiriti o Waitangi and invest in partnership with a range of Iwi/Māori organisations. We warmly welcome and value Mana Whenua who wish to work with us. We are committed to understanding Te Ao Māori and integrating it into our workplace culture, for the benefit of all future generations in Aotearoa. This role is being recruited through our partner, Consult Recruitment.For any questions about the vacancy, please contact either of the below:Sarah Quintal, Head of Tech, Enterprise & Transformation on 027 538 5589 | 09 410 7235 or email: sarah@consultrecruitment.co.nzMiguel Montanez, Account Manager IT & Digital on 021 124 2749 | 09 410 7235 or email: miguel@consultrecruitment.co.nz The Consult team will review your application and be in touch with you directly. Please note that the Guardians will not review applications submitted directly to us.