Senior Cyber Security Consultant & Strategy Lead

CyberCX; Auckland; Hybrid; NZD 110,000 - 180,000; Full time

Benefits offered by this job

Flexible hybrid working

Health and wellbeing program

Personalised development planning

Rewards and recognition program

Job summary

CyberCX is seeking a Senior Security Consultant to join our Strategy and Risk team in Auckland. You will combine technical expertise with governance experience to deliver trusted advice and lead cyber security initiatives for public and private sector clients.

The role involves performing CSF maturity assessments, NZISM certification activities, tabletop exercises, and providing vCISO services to support executive decisions.

Qualifications

• 3+ years’ experience in corporate or government IT security.
• Ability to translate technical risk into business risk, strategy and action.
• Strong report writing skills.
• Experience across multiple cyber security domains, such as risk assessment, CSF, ISM and ISO/IEC 27001.
• Experience with regulatory compliance and security controls.

Responsibilities

• Lead CSF maturity assessments to evaluate and enhance clients’ cyber security capabilities.
• Manage and deliver NZISM Certification & Accreditation activities for public sector organisations.
• Design, facilitate, and lead cyber security tabletop exercises.
• Provide trusted security advisory and vCISO services to support executive decisions.
• Develop and implement cyber security strategies, target operating models, and transformation roadmaps.
• Create, review, and uplift cyber security policy frameworks, standards, and procedures.

Skills

Stakeholder engagement

Governance & policy

Report writing

NIST CSF

NZISM C&A

Tabletop exercises

vCISO advisory

Strategy development

Tools

CSF maturity assessments

NZISM implementation

Policy development

Job description

CyberCX is seeking a Senior Security Consultant to join our Strategy and Risk team in Auckland. You will combine technical expertise with governance experience to deliver trusted advice and lead cyber security initiatives for public and private sector clients.

The role involves performing CSF maturity assessments, NZISM certification activities, tabletop exercises, and providing vCISO services to support executive decisions.