Cyber Security GRC Partner - Fixed Term 12 months

Innovation at the core. Powering a smarter future. 

At Vector, innovation sits at the heart of how we’re building a cleaner, more connected energy future. By embracing new ideas, strong partnerships, and practical technology, we’re making energy more resilient, secure, and accessible for Auckland and beyond. 

Cyber security plays a critical role in this work. Our Cyber Security team operates at the intersection of IT and operational technology (OT), protecting not just systems and data, but the critical infrastructure that keeps the lights on. It’s a complex, real world environment where security decisions have direct impact on customers, communities, and essential services. 

You’ll work across: 

• Enterprise IT, cloud, data, and digital platforms 

• Operational technology and critical infrastructure, where safety and availability matter 

• Emerging areas such as AI, automation, and smart networks, where innovation and risk must be balanced 

Vector: Pioneering the future of energy 

• We collaborate globally, including with partners like X, The Moonshot Factory, to bring leading edge technology home 

• Our network continues to evolve through analytics, automation, and digital tools that improve reliability and customer experience 

• We share innovation locally and internationally, helping others adopt smarter, more sustainable energy systems 

If you’re motivated by cyber security work where IT and OT meet, and where the impact is tangible, you’ll feel at home here. The future isn’t waiting. We’re building it now. 

The role 

This role sits in our Cyber Security GRC team and focuses on ensuring we stay on top of third party security assessments and access reviews, while continuing to improve how this work is done. 

You’ll be trusted to manage your own workload and work independently day to day. While the manager for this role is remote, you’ll have a buddy in the team (in either Auckland or Wellington) and support from experienced colleagues. 

On a typical week, you can expect to: 

• Lead and support third party security assessments and access reviews, ensuring they’re well documented and followed through 

• Work with engineers and stakeholders to set up and run access review campaigns 

• Use our GRC tool to manage reviews, evidence, and exceptions  

• Supporting SOC 2 and related compliance activity 

• Providing a second set of eyes over third party responses to AI related questions 

• Monitoring a shared team mailbox as part of a rotating roster and taking action where needed 

• Identifying opportunities to improve how we work, not just repeat the same process 

As this is a 12month maternity leave role, the scope is intentionally focused. That said, if you’re keen and interested, there’s plenty of opportunity to get involved in other areas. 

Who are we looking for? 

You’ll bring: 

• Proven experience and success in a similar cyber security governance, risk or compliance role 

• Experience with third party security assessments, access reviews, compliance, audit, or GRC type work 

• Familiarity with SOC 2, ISO 27001, or similar standards 

• Awareness of GRC tools and how they support better ways of working 

• Confidence working with engineers and reviewing technical responses or evidence 

• A practical understanding of risk and compliance in real environments 

You’ll also be: 

• A self starter who can manage their own work and ask good questions 

• Comfortable improving existing processes as you go 

• Curious about emerging areas such as AI risk 

• Collaborative, easy to work with, and able to have a laugh while getting the job done 

Why Vector 

We know that great energy starts with great people. You’ll join a team that’s actively improving how GRC works, values straight up communication and practical problem solving, and operates across cloud, data, and operational technology with real world impact. We support flexibility and trust people to manage their work. 

You’ll also benefit from: 

• A benefits package that supports wellbeing, security, and growth 

• Career development through internal opportunities and learning investment 

• An inclusive culture that values diverse perspectives 

• The chance to do work that matters, helping keep the lights on across Auckland and supporting a more sustainable energy future for New Zealand 

Apply now 

Applications close 26 March, though interviews may be held earlier. 

If this role excites you but you don’t meet every requirement, we still encourage you to apply. Your skills, experience, and perspective may be exactly what we’re looking for. 

Vector values diversity in all its forms and welcomes applications from people of all backgrounds, experiences, identities, and abilities.