Worker Type:
Permanent
Here at BNZ, it’s about more than just banking. We work together in an agile, energising environment to create innovative solutions through our promise “If you can imagine a better future, let’s find a way.”
We support wellbeing, flexible working and have a generous leave offering. There is the opportunity for growth, learning and career development. No two days are the same.
You will be working within the Cyber & Governance domain which sits in the Technology business unit. The Cyber & Governance function is responsible for establishing & operating the enterprise cyber security strategy, capabilities, and controls to protect BNZ (including customers, employees, and shareholders) from information security risks.
This is an Auckland based hybrid role with three days in the office and two days where you can work flexibly.
Mō te Tūranga | About the Role
We sat down with the People Leader (who you would report to) and they told us the following about the role:

What are 5 day to day tasks the person in this role will complete?

• Partner with delivery, data, and risk teams to integrate guardrails, patterns, and controls so production releases meet risk acceptance and delivery timelines, with zero high-risk findings at go live.
• Lead Threat Modelling & Control Design.
• Assure Compliance & Audit Readiness.
• Embed transparency, fairness, explainability, and human-in-the-loop practices where required for Gen-AI, reinforcing customer trust and supporting organisational values.
• Deliver targeted enablement for executives and delivery teams to increase pass rates at security gates and reduce repeat defects across initiatives.

What is the team culture and environment like?
A team culture which is collaborative and supportive, enabling career growth and a sense of ownership.
What is your management style?
I enable the team by providing the space to make decisions and to take actions and I provide the right level of support and engagement depending on the circumstances.
What is the most exciting thing about this opportunity?
There is opportunity to continue to develop in the role, you will work with highly skilled cyber and technology professionals across multiple platforms, services and technologies. Technology drives competitive advantage and you will be exposed to new (and old) technologies so that the role requires a growth mindset driving new skill acquisition.

What technical skills are REQUIRED for this role?

• 5+ years combined experience in information and cyber security.
• Security risk, audit, consulting, and governance experience.
• Experience in public cloud technologies.
• Information and cyber security operational experience.
• Prevention and detection methods / technologies.

What is your favourite thing about working for BNZ?
BNZ has a great culture, flexible working and extended leave. BNZ enables teams to be successful and to take ownership of outcomes.
Why did the last person leave this role?
This is a new role.
What attributes will this person display in order to be successful in this role?
A desire to learn new skills, takes initiative and ownership of outcomes. Great at collaborating to achieve outcomes.
PLEASE NOTE: Advertising closes Monday 1 September at 11:59pm.
We review applications as they are received and may close advertising early.
Nau Mai ki te Pēke o Aotearoa | Come to the Bank of New Zealand
This is an exciting opportunity to join us! We’re bold thinkers who are taking brave steps to create a company that people want to work for, and customers want to bank with. If you’re ready to join a fun organisation where we are proud of our culture and how we are helping New Zealander’s to ‘Find their way’, then show your interest by submitting your application - we can’t wait to read it.
Ehara taku toa i te toa takitahi, engari he toa takitini” - Success is not the work of an individual, but the work of many.”
Closing Date: 01 September 2025
Applications will be reviewed regularly across the advertising period, but we do reserve the right to close applications early

What are 5 day to day tasks the person in this role will complete?

• Partner with delivery, data, and risk teams to integrate guardrails, patterns, and controls so production releases meet risk acceptance and delivery timelines, with zero high-risk findings at go live.
• Lead Threat Modelling & Control Design.
• Assure Compliance & Audit Readiness.
• Embed transparency, fairness, explainability, and human-in-the-loop practices where required for Gen-AI, reinforcing customer trust and supporting organisational values.
• Deliver targeted enablement for executives and delivery teams to increase pass rates at security gates and reduce repeat defects across initiatives

What technical skills are REQUIRED for this role?

• 5+ years combined experience in information and cyber security.
• Security risk, audit, consulting, and governance experience.
• Experience in public cloud technologies.
• Information and cyber security operational experience.
• Prevention and detection methods / technologies