Cybercx - Security Transformation Manager

Cybercx; Wellington; On-site; NZD 120,000 - 170,000; Full time

Job summary

CyberCX is seeking a Security Transformation Manager to join our Strategy and Risk team. You will combine technical understanding with governance expertise while engaging stakeholders to deliver trusted cyber security outcomes for public and private sector clients.

Preferred candidates will have five+ years in global consulting or large tech, with strong communication, leadership, and risk management skills. A relevant degree is required.

Qualifications

• Strong stakeholder engagement and written communication skills.
• Experience leading client engagements independently and building security capability.
• Bachelor’s or master’s degree in cyber security, IT, business, accounting, finance, information systems or related field.
• Proven track record delivering impactful client outcomes through high‑quality execution and leadership.
• Ability to align engagements with broader business objectives and risk appetite.

Responsibilities

• Lead CSF maturity assessments to evaluate and enhance client cyber security capability.
• Manage NZISM Certification & Accreditation activities for public sector clients.
• Design and run cyber security tabletop exercises to test incident readiness.
• Provide advisory and vCISO services for executive decision‑making.
• Develop and implement security strategies, operating models, and transformation roadmaps.

Skills

Stakeholder engagement

Written communication

Leadership

Client engagement

Strategic thinking

Governance

Risk management

NZISM C&A

Education

Bachelor’s or Master’s degree in cyber security/IT/business

Job description

We are looking for a Security Transformation Manager to join our growing Strategy and Risk team. As an experienced consultant you will combine technical understanding and governance expertise with excellent stakeholder engagement.

At CyberCX you will work with clients across both the public and private sectors, delivering trusted advice, leading cyber security initiatives, and supporting organisations build and maintain effective security capabilities.

The preferred candidate will have proven experience in two or more of the following areas:

• Leading NIST Cybersecurity Framework (CSF) maturity assessments to evaluate and enhance clients’ cyber security capabilities.
• Managing and delivering NZISM Certification & Accreditation (C&A) activities for New Zealand public sector organisations.
• Designing, facilitating, and leading cyber security tabletop exercises to assess incident preparedness and strengthen organisational resilience.
• Providing trusted security advisory and virtual Chief Information Security Officer (vCISO) services, supporting executive-level decision‑making and governance.
• Developing and implementing cyber security strategies, target operating models, and transformation roadmaps aligned to business objectives and risk appetite.
• Creating, reviewing, and uplifting cyber security policy frameworks, standards, and procedures, including Incident Response Plans and supporting governance documentation.
• Advising clients on cyber security risk management, regulatory compliance, and best‑practice security controls to improve overall security posture.
• Lead discovery and consultation activities with client stakeholders to shape recommendations and outcomes
• Prepare high‑quality proposals, reports and presentations for senior client stakeholders
• Manage client expectations with professionalism, clarity and confidence

This role requires strong stakeholder engagement and written skills, the ability to lead client engagements independently, and a passion for helping organisations build resilient and effective cyber security capabilities.

Preferred Qualifications, Experience & Skills

• At least five years of experience in a global consulting firm or large technology organisation, with a focus on cyber security; experience in privacy, data management, or strategic risk is advantageous.
• Ability to communicate ideas and concepts with structure, clarity, and precision.
• Bachelor’s or master’s degree in cyber security, business administration, accounting, finance, information systems, computer engineering, or a related field.
• Experience coaching, mentoring, and leading others to build capability, strengthen engagement, foster a positive learning environment, and deliver high‑quality outcomes for customers.
• A proven track record of delivering impactful client outcomes through high‑quality execution, effective team leadership, and appropriate delegation.
• Strong ability to apply a strategic mindset and understand how engagements align with broader business objectives.
• Experience identifying opportunities and contributing to the qualification and sale of new engagements.