Job Description

Protect what matters. Enable what's next.

T&G is entering a new chapter in technology.

We're building a new technology leadership team to help shape how T&G works, grows and connects around the world. As our technology, data and global operations become increasingly connected, we're strengthening our leadership capability to make sure we're secure, resilient and ready for what's next.

We're looking for a Chief Information Security Officer (CISO) to establish and lead T&G's cyber security, information security and technology risk capability.

The opportunity

This is a new leadership role with significant influence across T&G.

You'll provide independent, expert advice to the CIO, Executive Leadership Team, Risk & Compliance and Board committees on cyber and technology risk, helping the organisation understand where we're exposed, what matters most and where we should invest.

You'll shape our cyber security and technology risk strategy while building the capability, frameworks and operating models needed to support a modern, increasingly cloud-enabled organisation.

The role spans cyber risk, security strategy, identity and access management, cloud security, security operations oversight, incident response, governance and assurance.

You'll also play an important role in making security part of how we design and deliver technology, rather than something that happens after the fact.

What you'll shape

• Define and evolve T&G's enterprise cyber security and technology risk strategy.
• Provide clear, commercially grounded advice to senior leaders and Board committees on cyber exposure, risk appetite and investment priorities.
• Establish stronger visibility and management of cyber, technology and third-party risks.
• Mature our Identity & Access Management strategy, including identity governance and privileged access.
• Establish security principles and guardrails across cloud and modern technology environments.
• Provide executive leadership during significant cyber incidents and ensure our response and recovery capabilities are tested and continuously improved.
• Establish and maintain cyber security policies, standards and control frameworks aligned to recognised standards.
• Oversee security assessments, audits, penetration testing and assurance activities.
• Build a strong security culture across T&G, helping leaders and employees understand their role in managing cyber risk.
• Shape the future cyber security function, capability and operating model.

What you'll bring

You'll be an experienced cyber security, information security or technology risk leader who can operate comfortably at executive and Board level.

You'll bring significant leadership experience and a deep understanding of cyber security frameworks, risk management and control design, together with strong knowledge across identity, cloud security and modern security architectures.

Just as importantly, you'll be able to translate complex technical issues into clear business impact and practical choices.

We're looking for someone who can advise without creating unnecessary fear, challenge without creating friction and make security a genuine enabler of the business.

Experience managing third-party security providers and complex vendor environments will be important, as will experience leading cyber risk, incident response and security uplift programmes.

Experience in a regulated, operationally complex or multi-region environment would be valuable.

Why T&G?

This is an opportunity to establish something that hasn't existed in this form before.

You'll have the scope to shape T&G's cyber maturity, influence investment decisions and build a security capability for a global business with real operational complexity.

Our purpose is to grow healthier futures, and protecting our people, information, technology and operations is an important part of making that possible.

You'll work alongside a new technology leadership team, with the opportunity to shape how cyber security works across technology and the wider organisation.

If you're looking for a CISO role where you can combine strategic influence with the opportunity to build, we'd like to hear from you.

Protect what matters. Enable what's next.

Proof of eligibility to work in New Zealand is required for all applicants and any offer of employment will be subject to a satisfactory background check.

We want T&G to be a place where everyone is accepted, respected and celebrated for who they are – regardless of our similarities or differences. It’s essential that everyone can be themselves and thrive, and that together we create a diverse and vibrant workplace.