Job Description

Senior Security Consultant – Enterprise & Integrity Services, Information Security

We are seeking a Senior Security Consultant to join our CISO office to help achieve our outcomes.

• Experienced security professional preferred.
• Experienced in managing complex security outcomes.
• Sound collaboration, communication, and critical thinking skills.
• Permanent, full-time role - preferable Wellington, other Inland Revenue locations will be considered.

The Opportunity | Ara Whiwhi Mahi

As Senior Security Consultant you will provide advice, guidance, analysis and lead delivery in a specialised domain/subject or professional field to ensure the systems which IR operates are effective, risk managed, and champion IR’s customer-centric and intelligence led culture, to deliver the outcomes required by government.

In line with Inland Revenue’s Information Security Strategy safeguard the integrity of the tax system by building on the existing IR fraud management processes, enable effective collaboration across IR current supply chain management practices that include IR people, processes and technologies.

In this varied role you will be responsible for:

• Demonstrate Inland Revenue's values through actions and decisions that make a positive contribution to the economic and social wellbeing of New Zealand.
• Develop and maintain a comprehensive understanding of Inland Revenue and its customers to deliver services that meet both current and future requirements.
• Provide senior-level consultation, advice, and specialized domain services across the organization to enable informed and high-quality decision-making.
• Offer guidance and support to enhance organizational capability and improve customer outcomes.
• Contribute to the development of cohesive security management practices and results.
• Identify and analyse emerging trends, providing thought leadership to advance innovative solutions for customers and organisational outcomes.
• Strengthening enterprise architecture, applying solid knowledge of technologies, trends, artificial intelligence, and threat management.
• Contribute to the security strategy by offering innovative approaches to address complex challenges and mitigate risks.
• Contribute to activities related to assessing and monitoring third-party security risks, including due diligence, remediation tracking, and ongoing assurance.

About you | Mōu

To be successful in this position you will possess the following capabilities.

• Take a system-wide perspective to identify opportunities for growth and strengthen both individual and organisational capabilities by collaborating across IR. Demonstrate exceptional analytical abilities to make complex, impactful technical decisions that support positive outcomes for customers, IR, and the government.
• Recognise strategic risks and help shape policies and strategies that deliver quality customer experiences while safeguarding IR’s integrity. Work effectively within a networked internal model to ensure timely, high-quality delivery of solutions.
• Lead, plan, and implement projects or initiatives, often working with internal and external teams, take responsibility for stakeholder management and project communications by leveraging outstanding communication skills and innate leadership qualities.
• Have a solid understanding of regulatory compliance standards and frameworks, including NIST 800, various NIST Frameworks, ISO 27001, ISO 27002, ISO 27005, ISO 42001, NZISM and PSR. Be familiar with maturity assessments like NIST CSF and CMMI.
• Knowledge and experience in cloud infrastructure and security, with proven success in developing enterprise-level security architecture. Understand and participate in penetration testing, remediation, and implementing mitigation controls.
• Demonstrate deep knowledge of information security principles and risk management across systems, personnel, assets, data, capabilities, and cyber risks in managed services environments, as well as expertise in supply chain, third-party, and artificial intelligence security risk management.
• Have a strong grasp of identity and access management technologies and their outcomes. Bring comprehensive experience in applying secure-by-design and secure-by-privacy principles, including integrating third-party and AI-enabled solutions.
• Commitment to continuous learning and staying ahead with emerging technologies and security developments.

About us | Mō mātou

The Information Security office assures leadership, stakeholders, and the public that Inland Revenue meets government security priorities and maintains safety. By emphasizing “security by design,” we promote a cultural shift where security is viewed as essential to protecting IR’s customers, staff, and partners, fostering strong awareness and transforming our workforce into proactive security advocates.

We manage risk through Certification and Accreditation of critical assets and systems, ensuring robust security practices and early detection of vulnerabilities. Serving as the core of the IR Security Network, our team oversees and coordinates security activities enterprise-wide, relying on formal governance and effective relationships across IR and its partners.

We are committed to supporting a healthy work-life balance by providing a supportive working environment and actively promote professional development opportunities, including AI literacy and advancement within cyber security domains. From time to time there will some adhoc travel required.

Apply here | Tono mai

Does this sound like you? Please applyonline,attacha copyofyourCV anda coverletteroutlining yourskills, experience, and knowledge in line with requirements as in the advertisement.

Forspecificqueries,includingacopyoftherolepleaseemail marco.van-hofwegen@ird.govt.nz .

Applicationsclose 5pm, 17 May 2026