Senior Cybersecurity Consultant

Role Overview

We are seeking an experienced cybersecurity expert to join our team as a Senior Cybersecurity Consultant. This position involves handling intricate security challenges and transforming them into well-defined, actionable solutions. You will lead impactful projects with significant clients in New Zealand, driving their cybersecurity maturity and resilience.

Key Responsibilities

• Take ownership of consulting assignments from initiation to completion, ensuring delivery within time and budget constraints.
• Create and communicate bespoke cybersecurity strategies and roadmaps aligned with organizational risk tolerance and development stages.
• Develop governance frameworks that are practical, sustainable, and fit organizational needs.
• Perform cybersecurity audits and assessments across multiple industries and domains.
• Assist clients in managing risks at both system and organizational levels by prioritizing critical concerns.
• Design and evaluate security programs, including assurance systems, vendor risk management, incident response, and security awareness initiatives.
• Formulate real-world applicable policies and compliance programs.
• Interact effectively with a broad range of stakeholders from senior executives to technical teams through workshops, documentation, and individual conversations.
• Provide mentorship and support to colleagues, fostering growth through knowledge sharing and guidance.

Expertise and Competencies

• Broad cybersecurity expertise encompassing governance, risk management, technology, and operational disciplines.
• Proven track record as a consultant capable of independently managing multiple priorities and gaining client trust promptly.
• In-depth understanding of international standards and frameworks such as NIST CSFv2, NIST SP800-53, ISO 27001/27002/27005, IEC 62443, PCI-DSS, SOC2 Type I/II, and ASD Essential 8.
• Well-versed with regional security guidance including NZ PSR, NCSC Minimum Cyber Security Standards, HISO 10029/ HISF, NZ ISM, AU ISM, and the NZ Privacy Act 2020.
• Hands-on experience managing PCI-DSS scopes, SAQ selections, and maintaining relationships with issuers, processors, and acquirers.
• Ability to explain the connection between security controls, threats, vulnerabilities, and organizational risk clearly.

Key Skills

• Excellent communication skills adaptable to boardrooms, technical deep-dives, or workshops.
• Strong analytical abilities for collecting data, evaluating evidence, and conducting system analysis.
• Exceptional multitasking and self-management capabilities paired with high professionalism.
• Capable of designing security solutions that are effective, feasible, and sustainable regardless of organizational size or maturity.
• Comprehensive understanding of how cybersecurity interfaces with privacy matters.
• Keen curiosity to stay informed on evolving cyber threats and developments impacting New Zealand entities.

Qualifications

• Relevant tertiary education or professional experience in cybersecurity or a related field.
• Preferred certifications include ISO 27001 Lead Implementer/Auditor, CISM, and CRISC.

Work Culture and Benefits

Our organization is a leading IT professional services provider in Australia and New Zealand, fostering a vibrant, agile work atmosphere despite its large size. The team-centric culture embraces inclusivity, support, and the opportunity for personal and professional growth.

Employees enjoy benefits including social events, relaxation areas, flexibility in working hours and remote options, and continuous learning opportunities. You will be recognized for your contributions in a collaborative and flat-structured environment.

We pride ourselves on maintaining an inclusive workplace that values every individual, ensuring a welcoming, supportive, and enjoyable setting for all staff.