Associate Security Risk and Compliance Specialist
Wellington, NZ / Auckland, NZ / Remote, NZ
Technology – Security /
Permanent /
Hybrid
Xero is a beautiful, easy-to-use platform that helps small businesses and their accounting and bookkeeping advisors grow and thrive.
At Xero, our purpose is to make life better for people in small business, their advisors, and communities around the world. This purpose sits at the centre of everything we do. We support our people to do the best work of their lives so that they can help small businesses succeed through better tools, information and connections. Because when they succeed they make a difference, and when millions of small businesses are making a difference, the world is a more beautiful place.
How you’ll make an impact
The Associate Security Risk Specialist will be part of a team working with all parts of the business to improve Xero’s security risk and compliance posture, to reduce the risk of security incidents and improve the efficiency and effectiveness of Xero’s security controls.
What you’ll do
- Assess security risks, and assist in complex risk assessments, across all areas of Xero’s business to ensure these are well understood and managed within Xero’s risk tolerance; including product, platform, and third party software and services.
- Support our team to ensure security compliance obligations, both internally defined and externally regulated, are understood and met across Xero.
- Assist in performing threat modeling of new/updated product features.
- Perform risk assessments of third party providers. Ensure that security risks are assessed and understood prior to, and during the engagement with the third party.
- Utilise the security risk management framework to ensure risks are documented, quantified, owned, communicated and escalated as appropriate across Xero.
- Provide input to responses to customer and supplier security assessments.
- Keep informed as to emerging security threats that have the potential to impact Xero and recommend mitigating strategies.
Success looks like
- Security assessments are completed and documented for all new third party software and technology services.
- Changes to Xero’s product and corporate infrastructure are in compliance with the IT Security Policy and standards and meet Xero’s compliance obligations.
- Audits and other compliance assessment activities are completed successfully, and compliance is maintained with required standards.
What you’ll bring with you
- Takes a business focused and pragmatic approach to security risk management.
- Ability to work as part of a team and able to take pride and ownership in their work.
- Has initiative and a passion for all things security and a willingness to go the extra mile.
- Able to effectively communicate to a wide range of people.
- An innovative and positive team player with a “can do” attitude.
- Fast learner, detail oriented, decisive, and enjoys fast paced work environments
Why Xero
Offering very generous paid leave to use however you’d like (plus statutory holidays!), dedicated paid leave to care for your physical and mental wellbeing as well as an Employee Assistance Program to access mental health care for you and your family, free medical insurance, wellbeing and sports programmes, employee resource groups, 26 weeks of paid parental leave for primary caregivers, an Employee Share Plan, beautiful offices, flexible working, career development, and many other benefits that reflect our human value, you’ll do the best work of your life at Xero.
Our collaborative and inclusive culture is one we’re immensely proud of. We know that a diverse workforce is a strength that enables businesses, including ours, to better understand and serve customers, attract top talent and innovate successfully. At Xero we embrace diversity and inclusion and value a #challenge mindset.
Research has shown that women and underrepresented groups are less likely to apply to jobs unless they meet every single competency or experience . If you are excited about this role, but your past experience doesn't align perfectly, we encourage you to apply anyway. You could be just the right person for this role and Xero. If you have any support or access requirements, we encourage you to advise us at time of application and throughout the interview process.
Xero is an NZ Immigration Accredited Employer and Rainbow Tick certified too.
