IT Risk and Compliance Analyst - Datam

IT Risk and Compliance Analyst

Newly created role. Shape how Datam approaches IT risk, compliance, and assurance from the ground up. Make your mark in a trusted organisation backed by NZ Post, based in Auckland (Highbrook, East Tamaki) or Wellington (CBD). Lead ISO 27001 compliance and security governance while partnering with experts across Datam and NZ Post Cyber Security.

Mō Te Datam – About Datam

At Datam, you'll get the best of both worlds – the backing of NZ Post and the freedom of a nimble, independent business. For over 35 years, we've helped organisations, including government agencies, deliver secure, effective communications to the right people at the right time. Our whānau‑like culture, focus on collaboration, and commitment to doing what's right for our customers make Datam a place where people stay and thrive.

Kōrero mō te tūranga – About the role

As our IT Risk and Compliance Analyst, you'll lead risk management, compliance, and assurance activities across Datam's technology environment, ensuring alignment with ISO 27001 : 2022, NZISM, and the Privacy Act. Working closely with internal teams and the NZ Post Cyber Security Team, you'll help strengthen our security governance, audit readiness, and overall risk posture.

You’ll act as our ISMS representative, managing audits, non‑conformities, and corrective actions, while supporting risk assessments, supplier due diligence, and ongoing compliance reporting. This role is all about visibility, influence, and continuous improvement, ensuring our security framework stays robust, compliant, and future‑ready.

You’ll Achieve That By

• Planning and coordinating ISO 27001 audits and maintaining audit readiness
• Managing non‑conformities, corrective actions, and compliance evidence
• Conducting risk assessments and maintaining Datam's security risk register
• Collaborating with teams to strengthen technical and procedural controls
• Delivering security governance, metrics, and reporting to senior leaders
• Supporting supplier due diligence and promoting security awareness across Datam

Mōu – About You

You're an experienced information security and risk professional who thrives in structured environments where precision and accountability matter. You know your way around audits, frameworks, and controls and you enjoy translating complex requirements into clear, actionable outcomes that make sense to the business. You're proactive, detail‑driven, and take pride in creating order, visibility, and confidence around compliance.

You’ll Couple That With

He Aha Te Pai – What you'll love about us!

Benefits

Hiahia? – Interested? Come and join the whanau!

Ready to be part of something bigger? If so, then apply today or find out more details about this opportunity by downloading the JD on the NZ Post Careers page. If you require additional information, please contact Michele Christie (Talent Business Partner) on .

Applications for this position close on 4 November 2025. Due to the fast‑paced nature of NZ Post, our vacancy close dates may be subject to change, so don't delay and make sure you apply as soon as possible.

All successful applicants will be required to provide proof of their eligibility to work in New Zealand and will be subject to a security check and reference checks. Some of our roles may also require a credit check and / or a drug test.

If you're interested in a role, please apply directly through our online portal. We won't consider candidates through agencies unless this has been previously approved.

There's something really special about being part of the team here at NZ Post – Tukurau Aotearoa, who we are and what we stand for is grounded in our values.

We are proud to be Rainbow Tick certified and recognise the diversity and uniqueness of our workforce and reaffirm our commitment to create a safe and inclusive environment for everyone.

#J-18808-Ljbffr