Cyber Security Consultant

RWA People; Auckland; Hybrid; NZD 140,000 - 190,000; Full time

Job summary

Jora New Zealand is seeking an experienced Cyber Security Consultant to join a large enterprise environment in Auckland. You will shape how security is embedded across technology delivery, working with architects, engineers and delivery teams from design through implementation.

The role focuses on advisory work (50–60%) and building reusable security patterns, guardrails and assurance practices to strengthen organisational security maturity. NZ work authorization is required.

Qualifications

• 10+ years across technology domains with at least 6+ years in cyber security, security architecture, technology risk or security assurance, including senior advisory-level experience.
• Strong technical understanding across cloud, IAM/PAM, networks, applications, infrastructure, SaaS and security controls.
• Proven experience partnering with architecture and engineering teams to influence secure designs.
• Experience developing reusable security patterns, guardrails and secure-by-design approaches.
• Knowledge of security frameworks (CIS, PCI DSS, ISO 27001, NIST, NZISM or similar) and translating them into practical controls.
• Excellent stakeholder management and communication skills with the ability to influence senior stakeholders.
• Strong commercial judgement balancing security risk with delivery needs.
• Must have valid NZ work authorization.

Responsibilities

• Partner with architects, engineers and delivery teams to embed security from design stage.
• Review architectures to identify threats and provide pragmatic security advice during implementation.
• Develop reusable security architecture patterns, controls and guardrails.
• Establish and mature threat modelling, security testing and assurance practices.
• Provide security input across cloud, SaaS, applications, infrastructure, IAM, PAM and networks.
• Support high-risk vendor assessments and major security incidents.
• Influence the security roadmap by identifying risks and improvement opportunities.

Skills

Cyber security

Security architecture

Technology risk

Security assurance

Senior advisory

Cloud security

IAM/PAM

Education

IT/CS degree

Job description

Jora New Zealand will close on 16th September 2026. Thank you for being with us, we are cheering you on as you continue your career journey.

About the Role

We\'re looking for an experienced Cyber Security Consultantto join a large enterprise environment and help shape how security is embedded across technology delivery.

This isn\'t a traditional GRC (Governance, Risk, Compliance) role, nor is it a hands-on Security Engineer position. You\'ll get involved early in technology initiatives, working alongside architects, engineers and delivery teams to understand what they\'re building, identify threats and risks, apply appropriate security patterns and controls, and influence solutions before they\'re implemented.

Approximately 50-60% of the role will focus on project and delivery advisory, with the remaining time focused on strengthening the organisation\'s wider security capability through reusable architecture patterns, controls, guardrails and assurance practices.

What You\'ll Be Doing

• Partner with architects, engineers and delivery teams to embed security into technology initiatives from the design stage
• Review solution architectures and designs, identify threats and risks, and provide pragmatic security advice throughout implementation
• Develop reusable security architecture patterns, principles, controls and guardrails that teams can consistently apply across future solutions
• Establish and mature threat modelling, security testing and implementation assurance practices
• Provide security input across cloud, SaaS, applications, infrastructure, IAM, PAM, networking and third-party solutions
• Support high-risk vendor assessments, complex security incidents and post-incident assurance activities
• Influence the wider cyber security roadmap by identifying emerging risks, lessons learned and opportunities to improve organisational security maturity

What We\'re Looking For

• 10+ years\' across technology domains with at least 6+ years\' experience across cyber security, security architecture, technology risk or security assurance, including senior advisory-level experience
• Strong technical understanding across areas such as cloud, IAM/PAM, networks, applications, infrastructure, SaaS and security controls
• Proven experience working with architecture and engineering teams to identify threats, assess proposed designs and influence secure technical solutions
• Experience developing practical security patterns, controls, guardrails and secure-by-design approaches that can be reused across technology teams
• Strong understanding of security frameworks such as CIS, PCI DSS, ISO 27001, NIST, NZISM or similar, with the ability to translate frameworks into practical controls
• Excellent stakeholder management and communication skills, with the confidence to constructively challenge technical teams and influence senior stakeholders
• Strong commercial judgement with the ability to balance security risk against practical delivery and operational requirements
• Must have valid NZ work authorization to be considered

Nice to Have

• CISSP, CISM, CISA, ISO or similar security certification
• Experience working within large, complex enterprise technology environments
• Exposure to regulated, critical infrastructure or security-conscious organisations
• Experience developing threat modelling and security testing assurance practices
• Tertiary qualification in IT, Computer Science or a related discipline

What\'s on Offer

• Permanent senior cyber security opportunity within a large enterprise environment
• Hybrid working based in Auckland
• Opportunity to influence security architecture and technology delivery across major initiatives
• Genuine scope to build security capability rather than simply assess projects against existing controls
• Work closely with senior architects, technology leaders and business stakeholders

If you\'re a senior cyber security practitioner who enjoys getting into architecture conversations early, challenging designs constructively and turning security principles into practical solutions, we\'d love to hear from you.

LK-4074329