- Auckland based
- Permanent, Full-time
About the Role
The Security Third Party and Assurance Specialist plays a key role within Health New Zealand's cybersecurity capability, focusing on the effective management of third-party security risks across a complex digital health environment. This role is responsible for providing strategic assessments of the third-party landscape and delivering clear, actionable insights to senior leaders on potential security challenges. By working closely with external partners and internal teams, the role ensures alignment with best practice security standards while actively supporting the adoption of a ‘Secure by Design' culture. Blending technical cybersecurity expertise with risk management, assurance, and relationship management, this role reinforces Health New Zealand's commitment to continuous improvement and strengthens the organisation's overall cybersecurity resilience against evolving threats.
About the Team/Service/ Location
The Security Third Party and Assurance Specialist is part of the Cyber Security team, reporting to the National Security Third Party and Assurance Manager within Health New Zealand's wider Digital Services function.The Cyber Security function within Health NZ is a national capability that ensures the protection of critical health systems, data, and services. Cyber security have established a robust security function that operates at scale across all of Health New Zealand, providing essential protection against cyber threats. A stable, consistent approach to cybersecurity is essential to safeguarding patient safety, maintaining public trust, and ensuring the continuity of vital healthcare operations.
About you
As an experienced cybersecurity professional with a solid understanding of third-party risk, governance, and assurance practices, you will have the ability to navigate complex relationships and apply advanced technical knowledge to strengthen organisational security. Additionally, the following skills and experience will contribute to your success in this role:
- 5 - 10 years experience in cyber security or IT risk roles.
- Experience in third-party risk assessments within cybersecurity is preferred.
- Proven experience using advanced technical cybersecurity knowledge to assess and strengthen organisational security.
- Relevant certifications in Change or Risk Management (e.g. CIA, CISA, etc).
- Proven ability to build constructive relationships and influences stakeholders to optimise business and health outcomes.
Working for Health New Zealand
Health New Zealand | Te Whatu Ora is ‘the weaving of wellness'. We're dedicated to ensuring excellent healthcare for the people of Aotearoa/New Zealand. The Equity Work Programme at Health NZ focuses on helping everyone in the health system think about equity when they do their work. It also promotes the cultural change needed for the whole system to reach equity in health outcomes.
Our people are at the heart of everything we do. Health New Zealand are committed to being good employers and honouring our equal employment opportunity obligations.
Our commitment to equity, diversity and inclusion
- We want to see the real you in your application and welcome the real you on board if you come and work with us. Skills are gained across many areas of our life, not just in formal employment. If you can demonstrate the skills listed in the ad, but the experience was gained through whānau life, community or mahi aroha (volunteering) we encourage you to apply and share your story with us in your cover letter.
- We particularly welcome applications from our diverse Māori, Pacific, disabled, and rainbow communities.
How to Apply
To view the position description and/or apply for the role please click “apply now.” All applications must be submitted through our online careers portal before 11:59pm on Tuesday 5th August. If you have any questions about the role, please contact Tegan Gutry at [email protected].
Whilst Health New Zealand is undergoing change affected kaimahi will be given preference and priority for this position.