Senior Systems Security Engineer

JobsCloseBy Editorial Insights

Senior Systems Security Engineer at the University of Auckland leads design and governance of security controls across cloud and on prem health data systems to meet HISF. You will collaborate with Product and engineering teams to assess risk and validate controls, bringing security engineering expertise across Windows, Linux, networks and cloud in a regulated environment using HISF, DHSF, HITRUST CSF or ISO 27001. Communication and stakeholder engagement are essential to translate risk into actions. To apply, tailor your CV and cover letter to demonstrate governance and risk mitigation, include CISSP or CISM, apply online by 17 August 2026, and note that email applications are not accepted. For confidential queries contact Michael Karich.

Company Description

Waipapa Taumata Rau | The University of Auckland

Digital Services enables the technology that powers learning, teaching, research, and the student experience across the University. Our Cybersecurity team plays a critical role in protecting the University's digital ecosystem by delivering modern security capabilities that keep our people, data, and systems secure.

Job Description

Te Whiwhinga mahi | The opportunity

We're building the future of cybersecurity at the University of Auckland.

To strengthen the protection of some of the University's most sensitive information, the Cybersecurity team is establishing a brand-new Health Data Management team dedicated to safeguarding systems that process sensitive health data.

As part of this investment, we are looking to appoint four Senior Systems Security Engineers to help design, implement, and govern the security controls, standards, and processes required to achieve and maintain compliance with the Health Information Security Framework (HISF) across a diverse range of critical systems.

These newly created roles will work across cloud and on-premise environments to identify security risks, implement technical controls, strengthen system configurations, and ensure our health systems meet the highest standards of information security and regulatory compliance.

These opportunities are ideally suited to experienced security engineers who have worked in regulated environments and understand frameworks such as HISF, Digital Health Security Framework (DHSF), HITRUST CSF, ISO 27001, or similar governance and assurance models. You'll bring extensive hands-on engineering experience across operating systems, infrastructure, networks, and enterprise platforms, together with the ability to design, validate, and continuously improve technical controls.

If you're passionate about security engineering, governance, compliance, and building secure-by-design environments that protect critical information, we'd love to hear from you.

Key responsibilities include:

• Designing, implementing, and maintaining technical security controls to support compliance across systems processing sensitive health information.
• Partnering with Product Owners and engineering teams to assess security risks, develop mitigation strategies, and strengthen system resilience.
• Conducting security assessments, validating technical controls, and producing clear risk and assurance documentation.
• Developing and improving security standards, governance processes, and compliance practices aligned to recognised health security frameworks.
• Leveraging security tooling to monitor compliance, identify risks, and improve visibility across the University's digital environment.
• Driving continuous improvement by strengthening security practices, technical controls, and engineering processes across Digital Services.

These are full-time, 37.5-hour-per-week roles on a permanent basis. The salary range is $110,700 - $149,800 per annum, depending on experience and qualifications.

For more information, please review the Position Description.

He kōrero mōu | About you

You're an experienced security engineer who enjoys solving complex technical challenges while helping organisations strengthen their security posture.

You thrive in environments where security, governance, and engineering come together, and you're comfortable working across operating systems, infrastructure, cloud platforms, enterprise applications, and networks. You enjoy partnering with technical teams to implement practical security solutions while ensuring compliance with recognised industry frameworks.

Most importantly, you're passionate about protecting sensitive information and using your expertise to build secure, resilient systems that make a real difference.

Ngā pūkenga motuhake | Important skills and experience

• Extensive experience in systems security engineering, infrastructure security, or cybersecurity within complex enterprise environments.
• Experience working within regulated or compliance-driven environments using frameworks such as HISF, DHSF, HITRUST CSF, ISO 27001, NIST, or equivalent.
• Strong knowledge of Windows, Linux, cloud platforms, networks, identity management, and secure systems administration.
• Experience producing security assessments, technical documentation, and implementing security controls that meet governance and assurance requirements.
• Excellent analytical, problem-solving, and stakeholder engagement skills, with the ability to influence technical teams and communicate security risks clearly.

The following would be highly beneficial:

• Industry certifications such as CISSP, CISM, CEH, OSCP, or equivalent.
• Experience working within healthcare, government, or other highly regulated sectors.
• Experience with security governance, assurance, or audit activities.

Ngā āhuatanga kei a mātou | What we offer

The University of Auckland provides a supportive, people-centred working environment where your wellbeing and professional development are genuinely valued. As part of our team, you'll enjoy:

• Flexible employment practices, including hybrid working.
• Up to 6.75% employer superannuation contribution.
• Five weeks' annual leave.
• Ongoing professional development and support for industry certifications.
• Opportunities to work with modern cybersecurity technologies, automation platforms, and enterprise-scale systems.
• A collaborative team environment where innovation, continuous improvement, and knowledge sharing are encouraged.
• Access to staff discounts, recreation facilities, wellbeing initiatives, and discounted parking.
• The opportunity to help shape one of the largest cybersecurity transformation programmes within New Zealand's tertiary sector.

Me pēhea te tuku tono | How to apply

Applications must be submitted online by the closing date of 17th August 2026 to be considered. Please include a cover letter and CV outlining how your skills and experience align with the requirements of the role.

For a confidential conversation, please contact Michael Karich via [email protected].
Please note: we are happy to answer your questions, but we do not accept applications by email.

Additional Information

Equity

The University is committed to meeting its obligations under the Treaty of Waitangi and achieving equity outcomes for staff and students in a safe, inclusive, and equitable environment.  For further information on services for Māori, Pacific, women, LGBTQIATakatāpuiMVPFAFF+, people with disabilities, parenting support, flexible work and other personal circumstances go to www.equity.auckland.ac.nz