# Business Risk and Assurance Manager **Company:** [DEFEND Limited](http://jobs.workable.com/companies/wKain5N9LuZNSaatk4VXhD.md) **Location:** Wellington, New Zealand **Workplace:** hybrid **Employment type:** Full-time **Department:** Resilience [Apply for this job](http://jobs.workable.com/view/9242585a-ad71-4185-891c-ab0a37ae8bc8) ## Description At DEFEND, we are committed to delivering exceptional cyber resilience by providing strategic, engineered solutions alongside expert advisory services. Our goal is to empower organisations to safeguard their digital assets through innovative technology and best-in-class practices. The Business Risk & Assurance Manager is responsible for maintaining an effective GRC (Governance, Risk & Compliance) framework internally that ensures DEFEND is accountable, transparent, and responsible to all of its stakeholders, including customers, employees, and the wider community. ## Requirements In this role you’ll... • Ensure DEFEND has robust security and privacy controls in place and meets it’s regulatory and privacy requirements • Maintain current company certifications like ISO and SOC 2 • Maintain and uplift the enterprise risk and compliance framework and policies • Oversee and coordinate enterprise risk management activities   • Complete customer, software, project, privacy and vendor/supplier risk assessments as required • Integrate risk management into business processes • Uplift and maintain data governance  across DEFEND • Maintain and update DEFEND policies and procedures at least annually • Assist in the creation and delivery of the DEFEND cybersecurity roadmap • Respond to internal cybersecurity and privacy incidents • Regular reporting for ELT, Board and steering committee meetings • Support business to implement policy and risk settings • Deliver annual security and privacy awareness training to all staff You’ll bring.. • Good knowledge and experience in implementing of industry standards and regulations (e.g. ISO, NIST, GDPR, COSO)   • Strong understanding and experience of risk management framework and processes • Good understanding of business governance functions and processes  • Leadership and communication skills to effectively communicate risks, requirements, and recommendations to stakeholders and team members • Project management skills to manage GRC initiatives, prioritise tasks, and meet deadlines • Collaboration skills to work with cross-functional teams and build relationships with internal and external stakeholders • Ideally have experience preparing for and managing regular audits like ISO and SOC 2 ## Benefits Our dream at DEFEND is to improve everyday life by creating a cyber resilient world. Over the last few years, we've experienced phenomenal growth, working with a wide variety of customers and winning several industry awards, including Microsoft's Global Partner of the Year for 2025!  Why DEFEND?  We believe in investing in our employees’ growth and providing them with opportunities to advance their skills and careers. We offer a collaborative workplace culture, and we are committed to fostering an inclusive environment where innovative thinking is encouraged.   By joining our innovative and creative team you will have the opportunity to contribute a variety of cybersecurity outcomes, from culture & awareness of cyber resilience, through to offensive & defensive security. No matter what your role, everyone at DEFEND contributes towards our dream of creating a cyber resilient world.  The benefits of working at DEFEND  In addition to working for a growing, dynamic NZ company, DEFEND offers the following benefits to all our DEFENDers  - 3.5% Kiwisaver on top of your base salary  - Southern Cross Health Insurance coverage  - Mobile and Broadband discounts for yourself and family   - Flexible, hybrid work environment  - An allowance to contribute to your home office setup  - Access to EAP services to support you across a range of wellbeing needs  Diversity & Inclusion:  At DEFEND, we celebrate a variety of perspectives and experiences. We know from experience that people from underrepresented groups often don’t apply for roles they don’t feel they meet all the criteria for. We’re committed to creating an environment that enables all our team to thrive. If you think you have what it takes, but don’t check every single box, please consider applying. We’d love to hear how you might contribute to the team and being our next DEFENDer.