Job Description

About Us

We are a proudly New Zealand-owned, award-winning KiwiSaver and wealth manager. Our mission is to educate and empower our customers to make sound financial decisions and achieve strong long-term performance. With a relentless focus on these goals, we are dedicated to growing Kiwis' wealth and helping them attain better financial outcomes in retirement.

At our core, we are a purpose-driven business, caring deeply about making a difference. Our passionate team plays a crucial role in bringing our mission to life. We foster a culture of idea-sharing and empowerment, encouraging our people to lead initiatives that positively impact our business, community, and members.

The Role

As the Cyber Security Manager, you will own the day-to-day execution, tracking and reporting of Generate’s information security programme. You will translate strategic direction from executive leadership and Generate’s external security advisory relationship into operational reality – running assurance activities, coordinating incident response, driving vulnerability and patch management, and maintaining the policy and vendor landscape that keeps Generate secure and audit-ready. This is an execution and delivery role, accountable for making that direction real, on schedule and well documented.

You will

• Own and drive the security roadmap, tracking delivery, risks and priorities and providing clear reporting and insights to leadership.
• Lead security assurance and testing, coordinating penetration testing and security assessments and driving findings through to remediation and closure.
• Own vulnerability and patch management, working closely with engineering squads and Tech Leads to identify, prioritise and resolve security vulnerabilities.
• Lead incident response, maintaining response plans and runbooks, coordinating incidents and running simulations and tabletop exercises.
• Drive security awareness across Generate, including phishing simulations, training and communications that improve security behaviours.
• Manage key security vendors and partners, ensuring performance, relationships and renewals are effectively managed.
• Own and evolve security policies and standards, including developing our secure Software Development Lifecycle (SDLC) policy in partnership with engineering.
• Partner across Technology and the wider business, turning security requirements into practical actions and ensuring risks don't quietly stall.
• Use AI, automation and digital tools to continually improve the efficiency and effectiveness of our security programme.

About You

Qualifications (or equivalent level of learning)

• Relevant Bachelors degree in Computer Science or related field.

Experience

• At least 7 years’ experience in security operations, security governance or GRC.
• Working knowledge of the New Zealand regulatory landscape relevant to a financial services entity, including FMA expectations and Privacy Act obligations.
• Hands-on experience running vulnerability management, incident response and assurance processes personally.
• Experience in a regulated industry such as financial services, insurance or healthcare.
• Familiarity with security frameworks relevant to NZ financial services, such as NIST CSF.
• Experience coordinating penetration testing, purple team exercises, or working directly with penetration testing / security vendors.
• Confidence having direct, sometimes difficult conversations with people managers about their team’s security behaviour.

What’s in it for you?

Our culture is what sets us apart. We set ourselves high standards, ensuring our work environment is one where people thrive and also have fun. We invest significantly in the well-being of our people and are intentional about celebrating wins.

In return for your hard work, you can also expect many great benefits working at Generate:

• A rewarding role with ongoing growth.
• Competitive base salary + bonus package.
• Competitive benefits package including health insurance, discounted gym membership, additional KiwiSaver contribution, corporate benefits and more!
• Proactive Health & Wellbeing Committee who organise a full calendar of events and initiatives.
• Ongoing training and support.
• Comfortable and central Auckland CBD office location.

Interested?

If you are interested in applying, please click "Apply Now" and include your CV and a cover letter highlighting your interest and fit for the role. Don’t delay, as we will begin reviewing candidates before the closing date.