Manager, Threat and Incident Response – CERT NZ

Tēnei tūranga – About the role

The Manager, Threat & Incident Response of New Zealand’s National CERT will play a critical leadership role in improving the Nation’s ability to identify, manage and avoid Cyber Security incidents. The CERT is the central component of the Government’s strategy to ensure a more secure, resilient, and prosperous online New Zealand by helping individuals and businesses to manage cyber security risks.

The Manager, Threat & Incident Response leads the technical Operations Team of the CERT and defines and executes the operational direction for CERT NZ. The Manager, Threat & Incident Response is directly responsible for the outcomes of the incident management processes and toolsets which comprise the core CERT functions. 

The Manager, Threat & Incident Response will be required to maintain a cutting edge understanding of New Zealand’s cyber security landscape and ensure that the CERT has the technical and operational facilities to respond to cyber incident reports, track cyber security incidents or attacks, and provide advice and alerts on how to respond and prevent further attacks.

The Manager, Threat & Incident Response will also be responsible for the professional development of this team, setting standards and processes, setting the team’s direction, building its culture and taking a strategic view of cyber security and the role of the CERT.

The Manager, Threat & Incident Response will be considered a Cyber Security expert and will be seen by the Security Industry as a lynchpin in terms of New Zealand’s Cyber Security ecosystem. They will be expected to represent the CERT via direct engagement with a wide range of New Zealand Public and Private organisations including key partners within the NZ Police, GCSB, DIA and MBIE and Critical Infrastructure providers. The Manager, Threat & Incident Response will also take a leading role in the CERTs international engagements with overseas CERTs.

The Manager, Threat & Incident Response will ensure CERT NZ has the technical and operational capability to leverage the international network of CERTs and play our part in a global effort to improve internet security. 

This role will be responsible for leading the delivery of the CERTs core function:

• Incident response and triage.
• Situational awareness and information sharing.
• Advice and outreach.
• International collaboration.
• National and International Co-ordination of serious cyber incidents.

Ngā herenga – Requirements of the role

Personal specifications

• Proven experience managing technical teams in time critical, challenging environments.
• Ability to engage with and develop credible relationships with security practitioners and business leaders.
• Experience of working and influencing at a senior technical level on information/cyber security issues.
• Comprehensive understanding of cyber threats and the threat landscape.
• Excellent written and oral communication skills.
• Demonstrated experience and ability articulating complex ideas clearly and confidently with precise attention to detail.
• Must have the legal right to live and work in New Zealand.
• Actively engaged with the Cyber Security and IT communities.
• Must hold an existing government security clearance or be able to obtain and maintain a security clearance.

Takohanga tuhinga o mua – Key accountabilities and deliverables

Delivery of quality solutions that contribute to the goals of the ministry

The Manager, Threat & Incident Response will be required to deliver results in the following areas:

• Lead a team of information security professionals to ensure the strategic approach and delivery of CERT’s incident response capability and supporting infrastructure is successful.
• Operationally responsible for the CERT’s effective National coordination of Serious Cyber Incidents and may be required to actively manage such events in conjunction with their team.
• Ensure that the CERT has the technical and operational facilities to respond to cyber incident reports, track cyber security incidents or attacks, and provide advice and alerts on how to respond and prevent further attacks.
• Building a strong Culture within the CERT.
• Building strong, effective relationships with partner Organisations, other National and International CERTs and within the Cyber Security community.

Serious cyber incident response and coordination, including:

• Managing the unit’s response to serious cyber incidents.
• Briefing to senior executives and Ministers.
• Communicating with technical and non-technical audiences.
• Communicating with the media.
• Overseeing continuous improvement, including leading processes to review and enhance systems and procedures.
• Overseeing the serious cyber incident response process and associated procedures.
• Managing the interface between classified and unclassified environments.
• Developing and maintaining strategic relationships with key internal and external stakeholders.
• Represent CERT at both domestic and international events, forums, and activities.
• Can credibly represent the CERT to news media when called on to do so in response to current or emerging threats or events.
• Speaking at national and international conferences and forums on cyber security issues.
• Working with the Senior/Communications Advisors to produce communications collateral.
• Improving the CERT constituents’ technical awareness and literacy regarding cyber threats and defences.
• Provide ongoing operational support the CERT Communications activities.

Strategic focus

• Contribute to the development of long- and short-term strategies for the future of the CERT NZ based on future trends and developments in New Zealand and overseas.
• Translate MBIE and government priorities into relevant strategic initiatives, providing input into business objectives and strategic plans.
• Create awareness within the team of their contribution to wider CERT NZ, Ministry, and government strategic priorities.
• Identify opportunities for CERT NZ to challenge conventional practices, or to play a leadership role within the national cyber security landscape.
• Undertakes projects to enhance the overall CERT NZ strategic plan.

Project management

• Lead project teams and manage project resources.
• Take accountability for the quality of project work.
• Uses projects as development opportunities for staff assigned.

Personal leadership

Provide leadership that engages and motivates others to succeed and develop, and proactively share experience, knowledge, and ideas:

• Models’ exemplary management and leadership behaviours, and State sector ethics and values.
• Creates a sense of vision, engages, and motivates people to participate, and makes things happen,
• Fosters an open, collaborative environment that encourages quality, innovation, ongoing learning, and knowledge sharing.
• Promotes technical excellence and reinforces the CERTs mission with external stakeholders.
• Takes responsibility for ensuring their own technical competence in cyber security is high and they are seen as a credible leader in the field by other members of the cyber security industry.
• Actively engages with the cyber security and IT community.

Team management

Apply sound general management practices so that the team operates effectively and efficiently, and delivers agreed outputs to support achievement of MBIE outcomes:

• Develops strategies, work programmes and performance targets for the Operations team, with supporting measurement, monitoring, and reporting mechanisms.
• Builds and develops an effective team culture.
• Aligns work programmes with the CERTs strategic direction and other work programmes.
• Monitors and adjusts work programmes through the agreed processes to enable the team to adapt to changing circumstances.
• Regularly monitors and reports on progress towards achievement of plans and strategies.
• Manages expenditure and resources in line with approved guidelines, budget, deadlines and reporting requirements, with a focus on driving cost effectiveness in CERT NZ.
• Builds continuous review and improvement processes throughout all elements of operations.
• Effectively and consistently identifies and manages risk.

Team leadership

• Build and maintain a high-performing team that can deliver innovative advice, products, and services to support MBIE’s strategic direction.
• Establishes clear accountabilities, expectations and performance standards with direct reports and ensures regular performance management and development occurs.
• Monitors individual and team performance to ensure that performance targets are met.
• Identifies gaps in capability and addresses these gaps through targeted recruitment and development or other actions.
• Coaches, mentors, and develops staff to meet the needs of CERT now and in the future

Relationship management

• Manage constructive working relationships with work colleagues and external stakeholders to enhance understanding and co-operation needed to achieve desired results.
• Building and maintaining strong relationships with key operational stakeholders nationally and internationally (e.g., NZ Police, National Cyber Security Centre, people in other CERTs).
• Participates as an active team member and contributes knowledge and expertise needed to achieve CERT’s outcomes.
• Develops effective working relationships with other CERT managers and people to transfer knowledge and learning from the team to the wider organisation.
• Represents whole-of-Ministry views and protects its reputation in external interactions.
• Engage with other national CERTs and international stakeholders in alignment with CERT NZ’s interests.
• Represent New Zealand at domestic and international events, forums, and activities.
• Build trust and understanding of CERT NZ’s functions and objectives with key stakeholders.
• Tests the effectiveness of stakeholder relationships using a range of appropriate measures and processes (including stakeholder feedback.

Wellbeing, health & safety

• Displays commitment through actively supporting all safety and wellbeing initiatives.
• Ensures own and others safety at all times.
• Complies with relevant safety and wellbeing policies, procedures, safe systems of work and event reporting.
• Reports all incidents/accidents, including near misses in a timely fashion.
• Is involved in health and safety through participation and consultation.

Tō tūranga i roto i te Manatū – Your place in the Ministry

The Manager, Threat & Incident Response position reports into the Director, CERT NZ within the Strategy & Enablement branch. The branch sits within the Te Whakatairanga Service Delivery group.

More information about MBIE's structure

Matatautanga – Competencies (Leadership Success Profile)

The Leadership Success Profile (LSP) is a leadership capability framework, developed by the New Zealand public sector for the New Zealand public sector. It creates a common language for leadership and establishes what great leadership looks like. You can look at the twelve underpinning capabilities and four leadership characters here: Leadership Success Profile | Te Kawa Mataaho Public Service Commission(external link)

To mātou aronga – What we do for Aotearoa New Zealand

Hīkina Whakatutuki is the te reo Māori name for the Ministry of Business, Innovation and Employment. Hīkina means to uplift. Whakatutuki means to move forward, to make successful. Our name speaks to our purpose, Grow Aotearoa New Zealand for All.

To Grow Aotearoa New Zealand for All, we put people at the heart of our mahi. Based on the principles of Te Tiriti o Waitangi / The Treaty of Waitangi, we are committed to upholding authentic partnerships with Māori.

As agile public service leaders, we use our breadth and experience to navigate the ever-changing world. We are service providers, policy makers, investors and regulators. We engage with diverse communities, businesses and regions. Our work touches on the daily lives of New Zealanders. We grow opportunities (Puāwai), guard and protect (Kaihāpai) and innovate and navigate towards a better future (Auaha).

Te Tiriti o Waitangi

As an agency of the public service, MBIE has a responsibility to contribute to the Crown meeting its obligations under Te Tiriti o Waitangi (Te Tiriti). Meeting our commitment to Te Tiriti will contribute towards us realising the overall aims of Te Ara Amiorangi – Our Path, Our Direction, and achieve the outcome of Growing New Zealand for All. The principles of Te Tiriti - including partnership, good faith, and active protection – are at the core of our work. MBIE is committed to delivering on our obligations as a Treaty partner with authenticity and integrity and to enable Māori interests. We are committed to ensuring that MBIE is well placed to meet our obligations under the Public Service Act 2020 (Te Ao Tūmatanui) to support the Crown in strengthening the Māori/Crown Relationship under the Treaty and to build MBIE’s capability, capacity and cultural intelligence to deliver this.

Mahi i roto i te Ratonga Tūmatanui – Working in the public service

Ka mahitahi mātou o te ratonga tūmatanui kia hei painga mō ngā tāngata o Aotearoa i āianei, ā, hei ngā rā ki tua hoki. He kawenga tino whaitake tā mātou hei tautoko i te Karauna i runga i āna hononga ki a ngāi Māori i raro i te Tiriti o Waitangi. Ka tautoko mātou i te kāwanatanga manapori. Ka whakakotahingia mātou e te wairua whakarato ki ō mātou hapori, ā, e arahina ana mātou e ngā mātāpono me ngā tikanga matua o te ratonga tūmatanui i roto i ā mātou mahi.

In the public service we work collectively to make a meaningful difference for New Zealanders now and in the future. We have an important role in supporting the Crown in its relationships with Māori under the Treaty of Waitangi. We support democratic government. We are unified by a spirit of service to our communities and guided by the core principles and values of the public service in our work.

What does it mean to work in Aotearoa New Zealand’s Public Service?(external link) — Te Kawa Mataaho The Public Service Commission