Data Security Architect

At One New Zealand, our purpose is to unlock the magic of technology to create an awesome Aotearoa. We're focusing on investing more into simpler and better products and services, to make things even better for New Zealanders. Join our pivotal Cyber Security Team at One NZ as a Data Security Architect, where you'll play a key role in safeguarding our digital assets and people. In alignment with our purpose of "Unlocking the magic of technology to create an awesome Aotearoa," you'll design and implement robust security measures for our data systems, collaborating closely with internal IT and Data teams. Your expertise in developing innovative solutions will help protect against cyber threats while empowering our organization to thrive in the digital age. Please note: this is an 18 month contract to support an ongoing project.

Ko tō mahi – what you’ll do

• Design, implement, and maintain secure data processing pipelines, ensuring data protection from ingestion to analysis through encryption, access controls, and secure handling practices.
• Monitor data pipelines and storage systems for security breaches, respond swiftly to incidents, and conduct regular audits and vulnerability assessments.
• Ensure compliance with relevant data security regulations (e.g., GDPR), implementing and maintaining necessary documentation and controls.
• Collaborate with data science and engineering teams to integrate security into data models, algorithms, and workflows throughout development and deployment processes.
• Conduct regular security assessments of data processing systems, provide detailed reports on security posture, and implement necessary enhancements.

Na tōu rourou - what you’ll bring

• Proficiency in Snowflake (crucial), DBT, and SQL.
• Security experience, including knowledge of:
  • Data protection frameworks, particularly NIST (required).
  • Data protection methods such as encryption, hashing, and data minimization.
  • Key Management Platforms (beneficial but not essential).
• Familiarity with Hashicorp (preferred but not required).
• Experience with AWS/Azure Key Management Service (KMS) (important).
• Understanding of data encryption and hashing techniques.
• Ability to apply data minimization principles in security architectures.
• Strong foundation in security frameworks, with a focus on NIST standards.
• Good communication skills, able to effectively engage with both internal and external parties.
• Good written skills, able to document processes and procedures, meeting minutes, fault reports, and particularly in creating and maintaining design documentation.