Information Security Consultant at Westpac New Zealand

Wellington, Wellington, New Zealand -

Full Time

Start Date

Immediate

Expiry Date

14 Oct, 26

Salary

0.0

Posted On

16 Jul, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Information Security Consulting, Risk-Based Advisory, Application Security, Secure SDLC, Threat Modelling, CI/CD Pipeline Security, Vulnerability Management, Security Architecture, Stakeholder Management, Cloud Security, Security Governance, SAST/DAST, ISO 27001, NIST, OWASP, CIS Controls

Industry

Banking

Description

Mō te tūranga | About the Role We have an exciting opportunity for an Information Security Consultant to join Westpac’s Information Security Group. In this role, you’ll provide specialist security consultancy and pragmatic, risk-based advice to business and technology teams with a strong focus on enabling digital transformation and uplifting application security across modern engineering environments. You’ll play a critical role in major initiatives and system implementations, ensuring change is delivered in line with security architecture, policies and standards, while still supporting pace and innovation. As a trusted advisor, you’ll translate complex technical risk into clear business impact and actionable recommendations, influencing outcomes from delivery squads through to senior stakeholders. You’ll also help strengthen security governance across third-party and supplier ecosystems, supporting a resilient and fit-for-purpose risk posture. Ko tō mahi | What you’ll do Provide specialist security consultancy and risk-based advisory to business and technology teams across digital transformation initiatives. Partner with engineering and delivery teams to embed Secure-by-Design and secure SDLC practices (e.g., threat modelling, security requirements, secure patterns, design reviews). Lead and contribute to application security assurance activities, including architecture/design risk assessments, secure code and pipeline control recommendations (CI/CD), vulnerability triage and risk acceptance decisions, and security testing oversight (SAST/DAST, dependency scanning, pen test coordination). Assess and manage information security risks associated with projects, systems, APIs, cloud services, and third-party engagements. Ensure change initiatives align with security frameworks, architecture, policies and standards; identify gaps and drive practical remediation plans. Translate complex security risks into clear business impacts and prioritised recommendations that delivery teams can execute. Support governance of supplier and outsourced security processes; contribute to uplift of controls and assurance expectations. Coach and influence teams to uplift security maturity and strengthen security culture across the organisation. Raise awareness and actively educate stakeholders at all levels, tailoring the message to technical and non-technical audiences. Nā tāu rourou | What will you bring? 5+ years’ experience in information security / cyber security (or closely related technology risk roles). 2-3 years’ experience in a security consulting / advisory capacity (internal consulting, professional services, GRC advisory, or equivalent). Core capability: Strong background in security risk consulting and the ability to balance risk, regulatory obligations, and practical delivery outcomes. Demonstrated experience supporting digital transformation programs (modernisation, cloud adoption, platform rebuilds, agile delivery). Proven application security expertise, including secure design and delivery practices (secure SDLC, threat modelling, security testing approaches, vulnerability management). Experience working with recognised security frameworks (e.g., ISO 27001/27002, NIST, CIS Controls, OWASP), and applying them pragmatically. Strong stakeholder management skills with the ability to build trusted relationships and influence outcomes. Excellent written and verbal communication skills — able to articulate both technical risk and business impact clearly. Strong analytical, problem-solving and decision-making capability. Commercial awareness and strong business acumen. Nice to have / beneficial: Professional certification such as CISSP, CISM, CISA, CCSP (or equivalent). Experience with cloud and cloud-native technologies (e.g., container platforms, automation, Infrastructure-as-Code). Knowledge of relevant regulatory and industry standards such as PCI DSS and Sarbanes Oxley. Westpac Hei Wāhi Mahi | Working at Westpac In addition to immersing yourself in a supportive team environment, you'll receive some great job perks and benefits including: 4 weeks standard holiday + 5 additional days of wellbeing leave to support you to be your best Additional purchased leave options up to 4 weeks per year Banking benefits, insurance discounts and superannuation scheme Growth and development – we provide opportunities for development and promote internal mobility Recognition - we recognise and reward our star performers School holiday subsidy - help you balance work and family during school holiday 2 Volunteer days per year Ko mātou tēnei | Our Organisation At Westpac, we’re working together to build a fairer and stronger New Zealand for our people, customers, and communities. For over 160 years we’ve been driven by our purpose to Create Better Futures Together. What makes us unique are the incredible people we’re lucky enough to have walk through our doors every day. The giant ‘W’ on our building doesn’t just stand for Westpac – it says, double you. We’re a place that values, rewards and recognises individuality. Where you can be your whole self, your true self, and your best self. We’re recognised as a place where talent is developed, where passions are fuelled and where ambitions of all shapes and sizes thrive. And it all starts with you! Tono mai ināianei! | Apply Now! Apply today with your CV and Cover Letter. The people of Aotearoa, New Zealand hail from many cultures and backgrounds. At Westpac New Zealand, we draw on this enormous talent pool to cultivate a team rich in ability and empowered to reach its full potential. Our aim is to be brave challengers, celebrating our differences and relentlessly advocating for our customers. It starts with us – we believe that when we care deeply and do our best for our people, they’ll do their best for our customers. We encourage people from all walks of life to apply, including those who are neurodiverse, have chronic health conditions or disabilities – your attitude and passion are as important to us as your experience, qualifications and capabilities. Mahi tahi tātou, kaha ake tātou | Together Greater Applications close: 29 July 2026 Our culture is rich with stories of how our people like to help, our customers, our community and each other. This is reflected through flexible working arrangements to ensure that our people have a balance in their life with those things that are important to them. Through ensuring that we provide opportunities to everyone regardless of what society throws at them, we are a safe place to work where you are treated equally and appreciated.

Responsibilities

Provide specialist security consultancy and risk-based advice to enable digital transformation and uplift application security across engineering environments. Lead security assurance activities, including threat modelling and design reviews, while managing risks associated with cloud services and third-party engagements.