Why AMARU

Six years ago we set out to change how cybersecurity gets delivered for businesses across the region. Today we're New Zealand's fastest-growing cybersecurity company, trusted by organisations across NZ, Australia, Fiji and Papua New Guinea — and we're still expanding.

We're not here to tick boxes. We're here to do security properly, and we're building a team that feels the same way. You'll have real ownership over your client accounts, work beside people who care about the craft, and help shape a company that's growing fast because it does things differently. There's a lot to learn here, and we back the people who bring that same energy to their work.

If you take ownership, stay curious, and want to help raise the bar for an entire industry — read on.

The role

You'll report directly to our CEO. That means real visibility into where the company is heading and a genuine seat at the table — no layers of management between you and the decisions that matter.

As our Information Security Specialist, you'll lead clients through SOC 2, NIST CSF, ISO 27001 and other frameworks, turning dense compliance requirements into practical, business-aligned security. You'll run several clients at once — each with its own risks, timelines and priorities — and bring the organisation and judgement to give every one of them your best.

This isn't clock-watching, nine-to-five work; security incidents and client needs don't keep office hours. But intensity here doesn't mean carrying it alone. You'll have a deep specialty and the range to cover a teammate — and they'll cover you. Automation handles the repetitive work, and a real bench means you can switch off without the world falling over. We build for ownership and for resilience, so caring hard about the client in front of you stays sustainable.

If that sounds like more effort than you're looking to give, this probably isn't the role for you. If it sounds like exactly the kind of work you want to be doing — keep reading.

What you'll be doing

• Lead compliance assessments and implementations against SOC 2, NIST CSF, ISO 27001, or other relevant standards
• Run security and risk assessments that surface real vulnerabilities and prioritise what actually matters
• Design security strategies and controls aligned to each client's business goals — not checkbox theatre
• Support and tune clients' security tooling as part of broader security engineering efforts
• Project-manage penetration testing engagements end to end, ensuring thorough coverage of client systems and applications
• Develop and deliver security awareness training that actually sticks
• Codify what you learn into our shared playbooks and tooling, so hard-won client knowledge lives in the team — not just in your head
• Act as the go-to subject-matter expert for clients and colleagues alike
• Contribute to AMARU's wider security operations services

What you'll bring

• 4+ years of experience in security and compliance, with a track record of successful client delivery
• Hands-on experience implementing SOC 2, ISO 27001, and/or NIST CSF
• Familiarity with security tools such as SIEM, WAF, DDoS protection, IAM, encryption, EDR, web proxy/filtering, and MDM
• Confident, clear communication — able to translate complex security concepts for technical and non-technical audiences alike
• A proactive mindset and a knack for building strong client relationships
• Relevant certifications such as ISO 27001 Lead Implementer, CISSP, CISM, or CRISC
• Sharp analytical skills and a practical, cost-conscious approach to problem-solving
• Active, daily use of AI tools as part of your workflow — drafting reports, accelerating risk analysis, researching frameworks — with the judgement to know where AI speeds you up and where it can't replace expert review
•