Information Security Specialist
Why AMARU
Six years ago we set out to change how cybersecurity gets delivered for businesses across the region. Today we're New Zealand's fastest-growing cybersecurity company, trusted by organisations across NZ, Australia, Fiji and Papua New Guinea — and we're still expanding.
We're not here to tick boxes. We're here to do security properly, and we're building a team that feels the same way. You'll have real ownership over your client accounts, work beside people who care about the craft, and help shape a company that's growing fast because it does things differently. There's a lot to learn here, and we back the people who bring that same energy to their work.
If you take ownership, stay curious, and want to help raise the bar for an entire industry — read on.
The role
You'll report directly to our CEO. That means real visibility into where the company is heading and a genuine seat at the table — no layers of management between you and the decisions that matter.
As our Information Security Specialist, you'll lead clients through SOC 2, NIST CSF, ISO 27001 and other frameworks, turning dense compliance requirements into practical, business-aligned security. You'll run several clients at once — each with its own risks, timelines and priorities — and bring the organisation and judgement to give every one of them your best.
This isn't clock-watching, nine-to-five work; security incidents and client needs don't keep office hours. But intensity here doesn't mean carrying it alone. You'll have a deep specialty and the range to cover a teammate — and they'll cover you. Automation handles the repetitive work, and a real bench means you can switch off without the world falling over. We build for ownership and for resilience, so caring hard about the client in front of you stays sustainable.
If that sounds like more effort than you're looking to give, this probably isn't the role for you. If it sounds like exactly the kind of work you want to be doing — keep reading.
What you'll be doing
Lead compliance assessments and implementations against SOC 2, NIST CSF, ISO 27001, or other relevant standards
Run security and risk assessments that surface real vulnerabilities and prioritise what actually matters
Design security strategies and controls aligned to each client's business goals — not checkbox theatre
Support and tune clients' security tooling as part of broader security engineering efforts
Project-manage penetration testing engagements end to end, ensuring thorough coverage of client systems and applications
Develop and deliver security awareness training that actually sticks
Codify what you learn into our shared playbooks and tooling, so hard-won client knowledge lives in the team — not just in your head
Act as the go-to subject-matter expert for clients and colleagues alike
Contribute to AMARU's wider security operations services
What you'll bring
4+ years of experience in security and compliance, with a track record of successful client delivery
Hands-on experience implementing SOC 2, ISO 27001, and/or NIST CSF
Familiarity with security tools such as SIEM, WAF, DDoS protection, IAM, encryption, EDR, web proxy/filtering, and MDM
Confident, clear communication — able to translate complex security concepts for technical and non-technical audiences alike
A proactive mindset and a knack for building strong client relationships
Relevant certifications such as ISO 27001 Lead Implementer, CISSP, CISM, or CRISC
Sharp analytical skills and a practical, cost-conscious approach to problem-solving
Active, daily use of AI tools as part of your workflow — drafting reports, accelerating risk analysis, researching frameworks — with the judgement to know where AI speeds you up and where it can't replace expert review
How we work
A seat at the table. Flat structure, a direct line to the CEO, and real influence on where AMARU goes next.
Ownership, with backup. You run your own accounts — but every capability is held by more than one of us, so no client, and no colleague, is ever a single point of failure.
AI- and automation-first. We automate the repetitive so your time goes to the judgement calls only an expert can make.
Craft over checkboxes. We'd rather do it right than just do it fast — and we're building the team and the tooling that make both possible.
Room to grow. A fast-growing company expanding across the Pacific, investing in the people who bring the energy to grow with it.
AMARU is an equal-opportunity employer. We welcome applicants of all backgrounds and are happy to accommodate access needs throughout the hiring process.