The Opportunity
An organisation in Auckland is in the midst of a meaningful digital transformation, led by a newly appointed CTO.
This is an opportunity to step into a high-trust role where you’ll own IT operations and, critically, help lead the information security compliance agenda - building the frameworks, controls and documentation that enable the business to scale safely.
This role sits firmly in the operations space within an AWS environment. There is already a dedicated DevOps capability, so this position is intentionally focused on IT operations + security assurance/compliance, rather than DevOps delivery.
- Transformation moment: join while the organisation is actively modernising, with strong CTO leadership and momentum.
- True ownership: you’ll have a clear mandate and autonomy to lift IT ops maturity and improve “how we run IT”.
- Commercially meaningful security work: lead and mature key compliance programmes (ISO 27001 / SOC 2 Type II).
- Ops + governance focus: partner closely with Engineering/DevOps to ensure controls are met, without being the DevOps person.
- Build foundations that scale: put in place practical processes, documentation and tooling that reduce friction and improve security posture.
What You’ll be Doing
- IT Operations (primary focus)
- Own corporate IT operations end-to-end (device lifecycle, internal support, vendor management)
- Manage laptop procurement, provisioning, inventory and decommissioning
- Administer identity and access management across tools (e.g., Google Workspace, Slack, GitHub and core systems)
- Ensure devices are patched, encrypted, secured and monitored appropriately
- Provide internal IT support across time zones (predominantly NZ/AU/US) with a focus on automation and self-service
- Maintain asset registers and clear internal documentation / knowledge base
Information Security Compliance & Assurance (key mandate)
- Lead ISO 27001 and SOC 2 Type II programmes end-to-end (planning, evidence, audits, continuous improvement)
- Own security policies and documentation (access control, data retention, incident response, vendor due diligence)
- Run internal audits, coordinate remediation, and manage external auditor relationships
- Support customer security questionnaires and assurance requirements with strong written responses
- Partner with Engineering/DevOps to align practices and controls—without owning DevOps execution
What You'll Bring
- 3–6 years’ experience in IT operations, infosec, or MSP-style service delivery
- Strong operational experience and deep familiarity with AWS environments
- Interest in (and ideally exposure to) information security and compliance frameworks such as ISO 27001 and/or SOC 2
- Strong written communication - policies, process, audit evidence and documentation are a key part of this role
- Pragmatic, calm operator who can prioritise, uplift maturity and keep things moving
Nice to have (not essential):
- Security certifications (ISO Lead Implementer, CISSP, CISM)
- MDM tooling experience (Jamf / Intune / Kandji)
- Experience in B2B SaaS and/or regulated environments
Next Steps?
To keep things simple, we ask that all applications are submitted through this advert. We’ll review applications as they come in and be in touch.
For any questions give
Teresa Jordan a call on
027 376 4884 and quote
Job ID: 17789 for a confidential chat.- due to the high volume of interest, please feel free to apply and follow up in a couple of days if you haven’t heard anything!
To apply for this vacancy, you
MUST be a New Zealand citizen, resident, or have already secured the right to work in New Zealand and therefore hold a valid visa.
At the appropriate stage we will request your references, we ask that you do not include them on your CV when applying.
Tribe is a group of specialist teams. Each of who truly understand their world, and together they partner to understand yours. Whether you’re looking for your next opportunity or recruiting, we’re all about bringing people together for a shared purpose. Find your people.