The company
Passionate, curious, and innovative are a few words that describe our people. We are powering the future, connecting communities, and igniting innovation. Orion owns and operates the electricity distribution network that provides power to central Canterbury. As the third largest electricity distribution network in New Zealand, we cover remote rural areas, regional towns, and the city of Christchurch.
We are an essential service and take our responsibilities seriously. We are community owned and working here means a career with meaning and purpose that makes a difference in your very own neighbourhood.
The role
Cyber security is always important but when the systems you're protecting underpin essential services for the community, it takes on a whole new level of importance.
We're looking for an Information Security Manager to take ownership of our information and cyber security function, leading cyber across the Orion Group and working across both our corporate and OT environments. This is a role with genuine breadth, setting the direction, understanding where our risks sit, strengthening our security maturity and making sure security works in the real world - not just on paper.
You'll be our security expert, but just as importantly, you'll be someone people want to involve early. Someone who can take a complex cyber risk and turn it into a conversation that makes sense to an engineer, a project team or at executive level.
Own and evolve our information security strategy, roadmap, policies, standards and governance framework
Lead our approach to cyber risk, assurance and compliance, ensuring risks are understood, prioritised and actively managed
Oversee security operations across corporate and OT environments, including threat detection, vulnerability and access management
Own our security incident response framework and lead the organisation through significant security events if and when they occur
Work closely with our OT teams to strengthen security across operational technology and industrial control environments
Build security into projects, technology change and operational processes from the outset rather than adding it at the end
Keep an eye firmly on what's coming next - emerging threats, vulnerabilities and technologies - and continue evolving our security posture accordingly
About you
You know your way around cyber security, but your value goes beyond knowing the frameworks. You can challenge constructively, make sound risk-based decisions and explain the why behind security requirements rather than simply saying no.
We're looking for someone who brings:
Strong information or cyber security experience, including experience taking ownership or providing leadership within a security environment
Ability to build strong relationships and influence people across technical teams, senior leaders, suppliers and external partners
A solid grounding in security governance, risk, compliance, strategy and control frameworks
Practical knowledge of frameworks such as ISO 27001, NIST CSF, AESCSF and NZISM
Experience across security operations, incident response, vulnerability management and security assurance
Experience securing operational technology (OT) environments, including an understanding of how OT differs from IT in risk, priorities and controls
An understanding of security architecture across on-premise, cloud and hybrid environments
Curiosity and a continuous improvement mindset - cyber security doesn't stand still, and neither should our approach
What they offer
You'll find at Orion, you can come as you are and just be you. You will be joining a workplace that values who you are, the work you do, and the way you think.
Importantly, we offer:
Flexible working arrangements, and flexible locations with our Head office in Burnside and satellite offices in Rolleston and Ferrymead
Three days of “My Days” leave
A broad range of workplace benefits from a wellbeing allowance to access to our holiday house in Hanmer!
You might be surprised to find out that the company that brings the power to your home is innovative, inclusive, progressive, and quite good fun.