Adviser, Cyber Security Strategy

Seisma Consulting; Sydney; Hybrid; AUD 130,000 - 190,000; Full time

Benefits offered by this job

Training & certification pathways

Flexible location

Job summary

Island Bell Advisers is seeking an Adviser, Cyber Security Strategy to contribute across client engagements from analysis through delivery. You will work in a multi-disciplinary team delivering strategic advisory and practical risk-based solutions.

The role involves assessments against Essential Eight, NIST CSF 2.0, ISO/IEC 27001, ISM and APRA CPS 234, stakeholder interviews, roadmaps, investment cases and operating model design.

Qualifications

• 3–6 years of experience in cyber security consulting, governance, risk and/or strategy.
• Experience with frameworks such as Essential Eight, NIST CSF 2.0, ISO/IEC 27001, ISM or APRA CPS 234 is preferred.
• CISSP, CISM, CRISC, CISA or ISO/IEC 27001 Lead Implementer/Auditor certifications are valued; progress towards these is a plus.

Responsibilities

• Conduct cyber security maturity, capability and risk assessments.
• Assess organisations against recognised security frameworks.
• Lead stakeholder interviews, workshops and document reviews.
• Develop cyber security strategies and multi-year roadmaps.
• Prepare reports, board papers and executive presentations.

Skills

Cyber security consulting

GRC

Cyber security strategy

Cyber security architecture

Strategy with risk focus

Education

Bachelor's degree in Cyber Security or related discipline

Job description

Full-time | Permanent | Location Flexible

Full-time | Permanent | Location Flexible

Help organisations make better cyber security decisions

Island Bell Advisers is an Australian strategic advisory and cyber security firm, working with boards and executive teams when the stakes are high, and the answer isn't obvious. We bring independent judgement, absolute discretion and practical solutions across four connected areas: strategic advisory, cyber security, resilience & reputation, and government & regulatory.

Our team brings together people from cyber security, technology, government and industry experts who have advised some of Australia's largest organisations. What connects us is curiosity, sound judgement and our commitment to helping clients through the moments that matter.

Why join Island Bell?

• Work in multi-disciplinary teams alongside experienced consultants and technology specialists, where different backgrounds and perspectives are genuinely valued.

• Be part of a supportive, inclusive culture built on integrity and discretion, where diversity goes beyond policies to real action, and everyone feels respected and able to do their best work.

• Access ongoing training, professional development and certification pathways that invest in your growth from day one.

• Build your network across some of Australia and New Zealand's leading organisations, with a growing client list that offers plenty of opportunity for your contract to extend beyond this role.

• Have the autonomy and support to bring innovative solutions to complex enterprise challenges and make a visible commercial impact.

About the role

As an Adviser, Cyber Security Strategy, you will contribute to a range of client engagements and own defined workstreams from analysis through to delivery.

Your responsibilities will include:

• Conducting cyber security maturity, capability and risk assessments

• Assessing organisations against frameworks including Essential Eight, NIST CSF 2.0, ISO/IEC 27001, ISM and APRA CPS 234

• Conducting stakeholder interviews, workshops and document reviews

• Analysing findings and identifying gaps based on risk reduction and business value

• Developing cyber security strategies and multi-year roadmaps

• Developing investment cases aligned to business objectives and risk appetite

• Contributing to target operating models covering governance, roles, responsibilities, sourcing and workforce planning

• Developing practical cyber security policies, standards and frameworks

• Preparing clear reports, board papers and executive presentations

• Translating technical security issues into business risk and executive-level decisions

• Managing defined workstreams, including scope, timelines, risks and dependencies

• Supporting third-party risk, program assurance and cyber security uplift engagements

• Contributing to proposals, methodologies, reusable tools, thought leadership and industry briefings

About you

We are looking for someone with 3–6 years of experience in one or more of the following:

• Cyber security consulting

• Cyber security governance, risk and compliance

• Cyber security strategy

• Cyber security architecture

• A cyber security function with significant exposure to strategy and risk

You will ideally have:

• Working knowledge of at least two of Essential Eight, NIST CSF 2.0, ISO/IEC 27001, ISM or APRA CPS 234

• Experience conducting assessments, interviews and workshops

• The ability to turn findings into clear, prioritised recommendations

• Strong written communication skills, particularly for executive audiences

• Confidence presenting to senior stakeholders

• Sound technical understanding of identity, cloud, network and endpoint security

• Strong analytical skills and attention to detail

• The ability to work independently and take ownership of your work

• The judgement and discretion required to work with sensitive client information

Experience working within financial services, government, critical infrastructure, health or other regulated environments will be highly regarded.

Experience with target operating model design, workforce planning, cyber security investment cases, third-party risk or supply chain risk will also be advantageous.

Qualifications and certifications

A tertiary qualification in Cyber Security, Information Technology, Risk, Business or a related discipline is preferred.

Certifications such as CISSP, CISM, CRISC, CISA or ISO/IEC 27001 Lead Implementer/Lead Auditor are valued, as is progress towards these qualifications.

Additional requirements

• Australian citizenship is required to obtain and maintain the necessary Australian Government security clearance

• Baseline security clearance, or eligibility and willingness to obtain one, is required

• NV1 clearance is desirable

• Interstate travel to client sites may be required depending on engagements

• Occasional work outside standard hours may be required to meet client deadlines

Ready to take the next step?

If you are looking to move from cyber security delivery into strategic advisory and want to work on complex problems alongside experienced practitioners, we would like to hear from you.