Security Operations Centre Lead

Benefits

Additional Information

Be the Technical Lead of a 24x7 hybrid SOC. Drive detection, response and cyber resilience at scale. Shape how NZTA stays secure in a rapidly evolving threat landscape . Te Whiwhinga mahi | The opportunity NZ Transport Agency Waka Kotahi (NZTA) is seeking an experienced Security Operations Centre (SOC) Lead to take accountability for the technical excellence, performance and continuous improvement of our 24x7 hybrid Security Operations Centre. Reporting to the Security Operations and Resiliency Manager within Te Aukaha | Digital, the key focus of this role is to support the Security Operations and Resiliency Manager as the day‑to‑day technical lead for the operation of the SOC, including incident response and technical leadership of a team of security specialists and analysts. You will also be NZTA's primary operational authority for SOC maturity, detection engineering and tactical incident command for high‑severity cyber incidents. You will lead a hybrid model that combines internal analysts, managed security services, automation and agentic AI to ensure cyber threats are detected, triaged and contained within defined risk thresholds. This is a senior, hands-on technical leadership role with a direct impact on NZTA's operational, regulatory and reputational resilience. Please note an on‑call roster may be required. Key responsibilities in the role include: Owning end‑to‑end performance of the 24x7 hybrid SOC, including internal capability, managed services and automated detection. Leading detection engineering and threat hunting, evolving MITRE ATT&CK coverage across SIEM, XDR and EDR platforms. Acting as tactical incident commander for Sev 1 and Sev 2 cyber incidents, making containment and response decisions under pressure. Governing the safe operational use of automation and agentic AI within the SOC under enterprise AI and security frameworks. Driving SOC maturity uplift against recognised maturity models and providing clear risk posture reporting to executive forums. Leading and developing specialist cyber security teams to sustain high‑performance, 24x7 operations. Managing SOC technology roadmaps, vendor performance and security tooling investment decisions. You can find out more about the role here: Position Description Ko koe tēnei | About you To be successful in this role, you will bring deep operational cyber security leadership experience and the confidence to make critical decisions in high‑impact situations. You will also bring: Proven experience leading a SOC or equivalent hybrid security operations function with 24x7 accountability. Strong technical expertise in detection engineering, threat hunting and security monitoring platforms (SIEM, XDR, EDR, SOAR). Demonstrated experience governing automation and AI‑enabled security tooling in a regulated environment. Experience acting as incident commander for high‑severity cyber incidents in complex or politically sensitive contexts. The ability to translate complex cyber risk into clear, executive‑level reporting and governance advice. Experience leading specialist cyber teams and building sustainable operational capability. Strong vendor and commercial management capability across managed security service providers. Knowledge of New Zealand government security frameworks (NZISM, PSR) and privacy obligations, or equivalent regulated environments. You will demonstrate knowledge of, or a willingness to gain an understanding of Te Ao Māori, and an appreciation of Te Tiriti o Waitangi as it applies in the public service. Please note you must have the ability to obtain and maintain a New Zealand National Security Clearance up to and including SECRET . Please use this link to determine whether you would be eligible to apply for a national security clearance https://www.protectivesecurity.govt.nz/guidance/getting-a-national-security-clearance/eligibility-tool Mō mātou | About us Te Aukaha | Digital enables NZTA to deliver its outcomes through modern, resilient and trusted digital and data capability. The Security team plays a critical role in reducing enterprise cyber and information risk through clear governance, resilient security operations and secure‑by‑design digital delivery. Ka whiwhi koe i te aha | What you will get in return At NZTA, you'll be part of an organisation that is committed to making a real difference for Aotearoa. We can offer you: A competitive salary and senior leadership role with national impact. Flexible working arrangements (role dependent). 5 weeks annual leave, plus income protection and critical illness insurance for permanent employees. A values‑led, inclusive workplace that supports your professional growth and wellbeing. Along with our other benefits , you'll join a team that is proud of the work it does for New Zealanders. Me pēhea te tuku tono | How to apply Please click Apply to upload your CV and cover letter outlining your suitability for the role. Rā Katinga | Applications cl