Senior Cyber Security Consultant & Strategy Lead

CyberCX; Wellington; On-site; NZD 120,000 - 180,000; Full time

Job summary

CyberCX in Wellington, New Zealand, seeks a Senior Security Consultant to join the Strategy and Risk team. You will blend technical security expertise with governance and stakeholder engagement to advise clients across public and private sectors.

The role focuses on CSF maturity, NZISM C&A, tabletop exercises, and vCISO services to shape risk-aware security strategies and compliant controls.

Qualifications

• 3+ years’ experience in corporate or government IT security.
• Ability to translate technical risk into business risk, strategy and action.
• Strong report writing skills.
• Experience across multiple cyber security domains including risk assessment, governance and compliance.

Responsibilities

• Lead CSF maturity assessments to evaluate client security capabilities.
• Manage NZISM Certification & Accreditation activities for NZ public sector.
• Design, facilitate and lead cyber security tabletop exercises.
• Provide advisory and vCISO services for executive decision-making.
• Develop and implement cyber security strategies, operating models and roadmaps.
• Create, review and uplift policy frameworks and incident response plans.
• Advise on risk management, regulatory compliance and controls.
• Lead discovery with client stakeholders and prepare proposals and reports.
• Manage client expectations with professionalism and clarity.

Skills

Stakeholder engagement

Report writing

Cyber security governance

Risk assessment

Cyber security strategy

Tabletop exercises

NIST CSF

NZISM C&A

Policy development

Regulatory compliance

Business risk translation

Job description

CyberCX in Wellington, New Zealand, seeks a Senior Security Consultant to join the Strategy and Risk team. You will blend technical security expertise with governance and stakeholder engagement to advise clients across public and private sectors.

The role focuses on CSF maturity, NZISM C&A, tabletop exercises, and vCISO services to shape risk-aware security strategies and compliant controls.