GRC Manager - Cybersecurity

At DEFEND, our dream is to improve everyday life by creating a cyber resilient world. We're looking for a GRC Manager to help protect and strengthen our business by managing our governance, risk, compliance, security and privacy capability.

This is a unique opportunity to influence business strategy and work closely with the senior stakeholders, to ensure DEFEND continues to operate with the highest standards of trust, resilience and assurance.

What you will do

• Manage DEFEND's GRC capability by leading and continuously improving our governance, risk, compliance, security and privacy frameworks.
•  Maintain trust and assurance through the successful renewal of DEFEND’s ISO certifications and SOC 2 attestations, plus other security, privacy and compliance obligations.
• Embed risk into decision making partner with leaders across the business by integrating risk management into everyday operations.
• Lead enterprise risk activities including customer, supplier, project, software and privacy risk assessments.
• Strengthen DEFEND's security posture through policy development, control uplift, data governance and security awareness initiatives.
• Support strategic outcomes contribute to DEFEND's cybersecurity roadmap and advise on key security, privacy and risk decisions.
• Provide trusted executive reporting to the ELT, Board and governance forums on risk, compliance, privacy and security matters.

The skills & experience you will bring to DEFEND 

• Proven experience in Governance, Risk and Compliance (GRC), information security, privacy, risk management or related disciplines.
• Strong working knowledge of recognised frameworks and standards such as ISO 27001, SOC 2, NIST, COSO, GDPR and other relevant regulatory requirements.
• Demonstrated experience developing, implementing and continuously improving risk management and compliance frameworks.
• Experience leading or coordinating external audits, certifications and assurance activities.
• Strong understanding of governance practices, risk management methodologies and compliance obligations.
• Excellent communication skills, with the ability to influence and engage stakeholders from operational teams through to Executive and Board level.
• Proven ability to translate complex risk and compliance requirements into practical business solutions.
• Strong project management and organisational skills, with the ability to juggle competing priorities and deliver outcomes in a dynamic environment.
• A highly collaborative approach and the ability to build trusted relationships across a diverse range of stakeholders.
• Experience responding to security, privacy or compliance incidents would be highly regarded.
• A continuous improvement mindset and a genuine passion for creating secure, resilient organisations.
• Comfortable rolling up your sleeves, adapting to change and contributing wherever needed to support the wider DEFEND business.

Our dream at DEFEND is to improve everyday life by creating a cyber resilient world. Over the last few years, we've experienced phenomenal growth, working with a wide variety of customers and winning several industry awards, including Microsoft's Global Partner of the Year for 2025! 

Why DEFEND? 

We believe in investing in our employees’ growth and providing them with opportunities to advance their skills and careers. We offer a collaborative workplace culture, and we are committed to fostering an inclusive environment where innovative thinking is encouraged.  

By joining our innovative and creative team you will have the opportunity to contribute a variety of cybersecurity outcomes, from culture & awareness of cyber resilience, through to offensive & defensive security. No matter what your role, everyone at DEFEND contributes towards our dream of creating a cyber resilient world. 

The benefits of working at DEFEND 

In addition to working for a growing, dynamic NZ company, DEFEND offers the following benefits to all our DEFENDers 

• 3.5% Kiwisaver on top of your base salary 
• Southern Cross Health Insurance coverage 
• Mobile and Broadband discounts for yourself and family  
• Flexible, hybrid work environment 
• An allowance to contribute to your home office setup 
• Access to EAP services to support you across a range of wellbeing needs 

Diversity & Inclusion: 

At DEFEND, we celebrate a variety of perspectives and experiences. We know from experience that people from underrepresented groups often don’t apply for roles they don’t feel they meet all the criteria for. We’re committed to creating an environment that enables all our team to thrive. If you think you have what it takes, but don’t check every single box, please consider applying. We’d love to hear how you might contribute to the team and being our next DEFENDer. 

Ready to help build a more cyber resilient future with DEFEND? Apply now or learn more at: https://defend.co.nz/careers/