Security Compliance Lead

Ko wai mātou – About us

Kia ora. We’re Foodies. You know New World, PAK’nSAVE and Four Square right? That’s us!

With 300+ stores and over 27,000 Foodies across Te Ika-a-Maui, our North Island Co-op has the privilege of helping New Zealanders get more out of life. Locally owned, we reflect the communities we serve, and we celebrate our people - our taonga, every day for being uniquely them.

Our Support Centre is 1,500+ people strong, which includes 500+ IT employees, who all play a vital role in ensuring the cogs of our Co-op stay turning and our systems stay ‘byte’-sized and ‘bug’-free.”.

Te Tūranga – About the role

We’re looking for an experienced Security Compliance Lead to lead our security compliance and assurance programme and help strengthen how we manage security risk across Foodies.

This is a leadership role with broad reach across PCI DSS, third-party security risk, audit and assurance, policy governance and control effectiveness. You’ll work closely with Technology, Security, Legal, Privacy, Procurement and business leaders, providing practical advice and ensuring compliance requirements translate into meaningful, workable controls.

You’ll also lead and develop our compliance squad, creating clarity, building capability and ensuring the team delivers trusted, high-quality outcomes.

What you’ll do

• Lead our security compliance and assurance programme, setting priorities across PCI DSS, third-party risk, audits, policies, control assurance and remediation.

• Own the compliance roadmap, ensuring risks, control gaps, audit findings and remediation activities are clearly understood, tracked and progressed.

• Lead PCI DSS governance and assurance, from scope and evidence coordination through to gap management, remediation and assessor engagement.

• Strengthen third-party security assurance, ensuring supplier risks are appropriately assessed, understood and managed.

• Own security policy and governance, keeping policies and standards practical, current and aligned with business, security and regulatory requirements.

• Provide trusted security risk and compliance advice, constructively challenging where needed and helping stakeholders make informed decisions.

• Lead and grow the compliance squad, coaching your people, building capability and creating a strong, consistent operating rhythm.

Ngā painga - What we offer

We’re committed to providing awesome experiences for our people, including offering a range of benefits

• Inhouse learning and development programmes and courses, flu vaccinations, and social network groups (we call them Tribes).

• Flexible working options, a day off on your birthday, long service leave

• Free carparking - we’ve got over 1,000 carparks including EV plugs

• Onsite café with subsidised meals, mini mart, 5% discount at our retail stores

He kōrero mōu - About you

• Around 8–10 years’ experience across security compliance, risk, governance or assurance.

• Strong knowledge of frameworks such as PCI DSS, NIST, ISO 27001 and CIS Controls, with the ability to turn requirements into practical controls.

• Demonstrated experience across areas such as PCI DSS, third-party risk, audit coordination, control assurance and policy governance.

• Strong judgement and the ability to assess risk and control effectiveness in complex environments.

• Excellent stakeholder and communication skills, including clear reporting for senior leadership and governance forums.

• A collaborative leadership style with the ability to coach, delegate and build a high-performing, trusted team.

• Relevant certifications such as CISM, CRISC, CGRC or PCI ISA would be advantageous.

Experience awesome. Achieve awesome. Be awesomely you.

We’re proud to have a focus on Diversity & Inclusion here at Foodies and welcome courageous behaviour, encourage togetherness, inspire our people to be their best selves in our Foodies whānau.

We encourage you to apply with all your awesomeness and welcome your diverse background, including any disability, additional health and mental health needs, and/or neurodiversity.

If you require accessibility support to ensure you can fairly access our recruitment process, please reach out to [email protected]. Accessibility support could include, interview location, sign language interpreter, assistive technology.

Don’t ‘cart’ around – apply now!

Are you ready to be part of our bunch – apply now