Senior Systems Security Engineer, HDM

Te Whiwhinga mahi | The opportunity

We're building the future of cybersecurity at the University of Auckland.

To strengthen the protection of some of the University's most sensitive information, the Cybersecurity team is establishing a brand-new Health Data Management team dedicated to safeguarding systems that process sensitive health data.

As part of this investment, we are looking to appoint four Senior Systems Security Engineers to help design, implement, and govern the security controls, standards, and processes required to achieve and maintain compliance with the Health Information Security Framework (HISF) across a diverse range of critical systems.

These newly created roles will work across cloud and on-premise environments to identify security risks, implement technical controls, strengthen system configurations, and ensure our health systems meet the highest standards of information security and regulatory compliance.

These opportunities are ideally suited to experienced security engineers who have worked in regulated environments and understand frameworks such as HISF, Digital Health Security Framework (DHSF), HITRUST CSF, ISO 27001, or similar governance and assurance models. You'll bring extensive hands-on engineering experience across operating systems, infrastructure, networks, and enterprise platforms, together with the ability to design, validate, and continuously improve technical controls.

If you're passionate about security engineering, governance, compliance, and building secure-by-design environments that protect critical information, we'd love to hear from you.

Key responsibilities include:

• Designing, implementing, and maintaining technical security controls to support compliance across systems processing sensitive health information.

• Partnering with Product Owners and engineering teams to assess security risks, develop mitigation strategies, and strengthen system resilience.

• Conducting security assessments, validating technical controls, and producing clear risk and assurance documentation.

• Developing and improving security standards, governance processes, and compliance practices aligned to recognised health security frameworks.

• Leveraging security tooling to monitor compliance, identify risks, and improve visibility across the University's digital environment.

• Driving continuous improvement by strengthening security practices, technical controls, and engineering processes across Digital Services.

These are full-time, 37.5-hour-per-week roles on a permanent basis. The salary range is $110,700 - $136,700 per annum, depending on experience and qualifications.

For more information, please review the Position Description.

He kōrero mōu | About you

You're an experienced security engineer who enjoys solving complex technical challenges while helping organisations strengthen their security posture.

You thrive in environments where security, governance, and engineering come together, and you're comfortable working across operating systems, infrastructure, cloud platforms, enterprise applications, and networks. You enjoy partnering with technical teams to implement practical security solutions while ensuring compliance with recognised industry frameworks.

Most importantly, you're passionate about protecting sensitive information and using your expertise to build secure, resilient systems that make a real difference.

Ngā pūkenga motuhake | Important skills and experience

• Extensive experience in systems security engineering, infrastructure security, or cybersecurity within complex enterprise environments.

• Experience working within regulated or compliance-driven environments using frameworks such as HISF, DHSF, HITRUST CSF, ISO 27001, NIST, or equivalent.

• Strong knowledge of Windows, Linux, cloud platforms, networks, identity management, and secure systems administration.

• Experience producing security assessments, technical documentation, and implementing security controls that meet governance and assurance requirements.

• Excellent analytical, problem-solving, and stakeholder engagement skills, with the ability to influence technical teams and communicate security risks clearly.

The following would be highly beneficial:

• Industry certifications such as CISSP, CISM, CEH, OSCP, or equivalent.

• Experience working within healthcare, government, or other highly regulated sectors.

• Experience with security governance, assurance, or audit activities.

Ngā āhuatanga kei a mātou | What we offer

The University of Auckland provides a supportive, people-centred working environment where your wellbeing and professional development are genuinely valued. As part of our team, you'll enjoy:

• Flexible employment practices, including hybrid working.

• Up to 6.75% employer superannuation contribution.

• Five weeks' annual leave.

• Ongoing professional development and support for industry certifications.

• Opportunities to work with modern cybersecurity technologies, automation platforms, and enterprise-scale systems.

• A collaborative team environment where innovation, continuous improvement, and knowledge sharing are encouraged.

• Access to staff discounts, recreation facilities, wellbeing initiatives, and discounted parking.

• The opportunity to help shape one of the largest cybersecurity transformation programmes within New Zealand's tertiary sector.

Me pēhea te tuku tono | How to apply

Applications must be submitted online by the closing date of 16th July 2026 to be considered. Please include a cover letter and CV outlining how your skills and experience align with the requirements of the role.

For a confidential conversation, please contact Michael Karich via michael.karich@auckland.ac.nz. Please note: we are happy to answer your questions, but we do not accept applications by email.