Senior Systems Security Engineer

About University of Auckland Cybersecurity Team

Waipapa Taumata Rau | The University of Auckland's Digital Services provide essential technology enabling research, teaching, learning, and the overall student experience. The Cybersecurity unit is central to protecting the University's digital assets by deploying advanced security capabilities that safeguard people, systems, and data.

Role Overview

The University is establishing a new Health Data Management team to bolster the protection of sensitive health information systems. The Cybersecurity department is recruiting four Senior Systems Security Engineers to design and oversee security controls that ensure compliance with the Health Information Security Framework (HISF) across critical cloud and on-premises systems.

These positions involve identifying system vulnerabilities, implementing and enhancing technical controls, and reinforcing system configurations to meet rigorous information security and compliance standards. Candidates should have seasoned experience in environments governed by regulatory frameworks such as HISF, DHSF, HITRUST CSF, ISO 27001, or related assurance models. Strong expertise across operating systems, infrastructure, networks, and enterprise platforms is expected, alongside aptitude in creating and refining technical security controls and governance.

Key Responsibilities

• Develop and maintain technical security controls to ensure adherence to compliance requirements for systems handling sensitive health data.
• Collaborate closely with Product Owners and engineering squads to identify security threats, devise mitigation plans, and increase system resilience.
• Perform security assessments, validate implemented controls, and prepare comprehensive risk and assurance documentation.
• Enhance security standards, governance policies, and compliance protocols aligned to recognized health security frameworks.
• Utilize security monitoring tools to track compliance status, detect risks, and enhance visibility across the University's digital infrastructure.
• Lead continuous improvement initiatives focused on refining security practices, technical measures, and engineering workflows within Digital Services.

Candidate Profile

Ideal applicants are security engineers with a demonstrated ability to resolve intricate security challenges and bolster organizational security infrastructure. You should be adept at integrating security, governance, and engineering disciplines, comfortable working with various operating systems, cloud environments, enterprise applications, and network technologies. A commitment to protecting sensitive data by building secure, resilient systems is essential.

Required Skills and Experience

• Proven background in systems security engineering or cybersecurity management within complex enterprise settings.
• Experience conforming to compliance frameworks like HISF, DHSF, HITRUST CSF, ISO 27001, NIST, or equivalent standards.
• Solid command of Windows and Linux operating systems, cloud platforms, networking, identity management, and secure system administration.
• Skilled in conducting security assessments, documenting technical security measures, and implementing controls aligned with governance requirements.
• Strong analytical and problem-solving capabilities, including effective communication and influence with stakeholders on security issues.

Preferred Qualifications

• Professional certifications such as CISSP, CISM, CEH, OSCP, or equivalents are advantageous.
• Experience in healthcare, government, or other tightly regulated industries is desirable.
• Familiarity with security governance, assurance, or audit processes is beneficial.

What We Offer

• A supportive, inclusive work culture focused on wellbeing and professional growth.
• Flexible working arrangements including the possibility of hybrid work.
• Employer superannuation contributions up to 6.75%.
• Five weeks of annual leave entitlement.
• Access to ongoing professional development and support towards earning industry certifications.
• Involvement with cutting-edge cybersecurity technologies and large-scale enterprise systems.
• A collaborative environment fostering innovation, knowledge exchange, and continual improvement.
• Additional benefits such as staff discounts, recreational facilities, wellbeing programs, and discounted parking.
• An opportunity to contribute significantly to a major cybersecurity transformation within the New Zealand tertiary education sector.

Additional Information

The University is committed to honoring the Treaty of Waitangi and achieving equity outcomes in a safe, inclusive, and respectful workplace. Support services exist for Māori, Pacific peoples, women, LGBTQIATakatāpuiMVPFAFF+, individuals with disabilities, caregivers, and for accommodating flexible work needs.

Employment Details

This is a full-time employment opportunity with a standard 37.5-hour workweek on a permanent basis. Annual remuneration ranges from $110,700 to $149,800 NZD, dependent on experience and qualifications.

Application Process

Applicants are requested to apply online by August 17, 2026, submitting a cover letter and CV that detail relevant skills and experience. Confidential inquiries can be directed to the hiring contact. Note that applications sent via email will not be accepted.