GRC Manager - Cybersecurity

About DEFEND and the Role

DEFEND is dedicated to enhancing everyday life by fostering a cyber resilient environment. We are seeking a Governance, Risk, and Compliance (GRC) Manager to lead our security, risk, and privacy initiatives, reinforcing our organizational integrity and business continuity.

Key Roles and Responsibilities

• Oversee and evolve DEFEND's governance, risk management, compliance, security, and privacy frameworks.
• Maintain company trust through renewing ISO certifications, SOC 2 attestations, and fulfilling security, privacy, and regulatory commitments.
• Integrate risk awareness into everyday operations by collaborating with leaders across departments.
• Lead enterprise-wide risk assessments including customer, supplier, project, software, and privacy risks.
• Enhance security posture through policy formulation, control improvements, data governance, and awareness campaigns.
• Contribute to DEFEND's cybersecurity strategy and provide counsel on security, privacy, and risk-related decisions.
• Deliver comprehensive executive-level reports on governance, risk, compliance, privacy, and security matters to the Executive Leadership Team, Board, and other governance bodies.

Required Skills and Experience

• Substantial experience in GRC, information security, risk management, privacy, or associated disciplines.
• In-depth knowledge of frameworks and standards such as ISO 27001, SOC 2, NIST, COSO, GDPR, and relevant regulatory requirements.
• Proven record in developing and continuously enhancing risk and compliance management frameworks.
• Experience managing or coordinating external audits, certifications, and assurance processes.
• Strong familiarity with governance practices, risk methodologies, and compliance obligations.
• Excellent communication capabilities to influence and engage diverse stakeholders, from operational personnel to executive leadership and board members.
• Ability to translate complex compliance and risk requirements into practical business solutions.
• Robust project management and organizational skills to manage competing priorities in a fast-paced setting.
• Collaborative disposition fostering trusted relationships with various stakeholders.
• Experience handling security, privacy, or compliance incidents is advantageous.
• A proactive mindset focused on continual improvement and dedication to building resilient, secure organizations.
• Flexible and hands-on approach, ready to adapt and support broader business needs.

Benefits and Work Environment

DEFEND is a rapidly expanding New Zealand company recognized with awards including Microsoft's Global Partner of the Year 2025. We prioritize career advancement and skill development within a collaborative and inclusive culture that values diverse perspectives and innovation. Employees enjoy contributing to a broad spectrum of cybersecurity initiatives, from awareness programs to advanced security operations.

Additional perks for DEFEND employees include:

• Employer contribution of 3.5% to Kiwisaver on top of base salary
• Southern Cross Health Insurance coverage
• Discounts on mobile and broadband services for employees and their families
• Flexible hybrid work arrangements
• Allowance to enhance home office setup
• Access to Employee Assistance Program services supporting wellbeing

Diversity and Inclusion

DEFEND is committed to fostering an inclusive workplace that promotes the success of all team members. Candidates from underrepresented groups are encouraged to apply even if they do not meet every criterion, as diverse perspectives strengthen our team.