Senior Cybersecurity Consultant

About the Role

We are seeking an experienced cybersecurity expert who excels at transforming complex security challenges into clear, actionable solutions. As a Senior Cybersecurity Consultant, you will lead crucial projects for some of New Zealand's key organisations. This role requires independent operation, rapid trust building, and a combination of strategic insight and technical expertise in client engagements across diverse industries.

Responsibilities

• Manage consulting projects end-to-end, ensuring timely delivery and budget adherence.
• Craft and communicate cybersecurity strategies and roadmaps aligned with each client's risk tolerance and maturity level.
• Create and implement governance frameworks that are practical, sustainable, and tailored to organisational needs.
• Perform cybersecurity assessments and audits across various sectors.
• Oversee organisational and system-level risks, guiding clients on prioritisation.
• Develop and evaluate security programs including system assurance, third-party/vendor reviews, incident response, and security awareness initiatives.
• Formulate policies and compliance initiatives that are effective in practice.
• Engage effectively with stakeholders, from senior executives to technical teams, through workshops, documentation, and individual conversations.
• Provide mentorship and support to colleagues, facilitating knowledge sharing and hands-on guidance.

Qualifications and Experience

• Broad cybersecurity expertise covering governance, risk management, technology, and operations.
• Proven consulting background with a track record of independent delivery, prioritisation skills, and earning client trust.
• In-depth knowledge of international standards and frameworks such as NIST CSFv2, NIST SP800-53, ISO 27001/27002/27005, IEC 62443, PCI-DSS, SOC2 Type I/II, and ASD Essential 8.
• Knowledge of New Zealand and Australian cybersecurity standards including NZ PSR, NCSC Minimum Cyber Security Standards, HISO 10029/HISF, NZ ISM, AU ISM, and the NZ Privacy Act 2020.
• Practical PCI-DSS experience encompassing scoping, SAQ selection, and managing relationships with issuers, processors, and acquirers.
• Ability to clearly explain the link between security controls, threats, vulnerabilities, and business risk.

Skills and Attributes

• Excellent communication skills adaptable for executive meetings, technical discussions, and workshops.
• Strong analytical capabilities for information gathering, evidence analysis, and system evaluation.
• Effective multitasking and self-management skills with professional discipline.
• Capability to design solutions that are efficient, feasible, and sustainable regardless of organisational scale or maturity.
• Deep understanding of the relationship between cybersecurity and privacy.
• Proactive in keeping up to date with evolving threats and their implications for New Zealand organisations.

Qualifications

• Relevant tertiary education or equivalent professional experience.
• Desirable certifications include ISO 27001 Lead Implementer/Auditor, CISM, and CRISC.

Culture and Benefits

Datacom is a leading IT services provider in Australia and New Zealand that maintains an agile, small-company culture despite its size. We prioritize our people, offering several benefits including social events, relaxation areas, remote work options, flexible hours, and professional growth opportunities. Employees are valued, recognised, and work within a flat organisational structure fostering collegiality.

Working here means engaging with leading technology to support large enterprise clients in tackling their most pressing challenges, ensuring continual learning and new opportunities.

We are committed to creating an inclusive, welcoming workplace where employees feel supported, with ongoing efforts to maintain a fun and friendly environment.