Senior Cyber Security Consultant - Strategy & Risk

Senior Cyber Security Consultant – Strategy & Risk
Auckland | Hybrid

We’re looking for an experienced Senior Cyber Security Consultant to join a growing cyber security advisory and risk consulting team.
This is a client-facing consulting role working with enterprise and public sector clients. You’ll lead cyber security engagements, provide trusted security advice, and help organisations improve their cyber resilience, governance and risk posture.
Key responsibilities

Lead cyber security risk and maturity assessments
Deliver NIST Cybersecurity Framework assessments
Support HISF, NZISM, ISM and ISO 27001 advisory work
Design and facilitate cyber security tabletop exercises
Provide security advisory and vCISO-style support
Develop cyber security strategies, roadmaps and operating models
Review and uplift security policies, standards and Incident Response Plans
Advise clients on cyber risk, governance, compliance and security controls
Lead client workshops, discovery sessions and stakeholder engagement
Prepare high-quality reports, proposals and presentations for senior stakeholders

About you
You’ll be a confident cyber security consultant who can translate technical security risk into clear business recommendations.
You’ll ideally bring:

3+ years’ cyber security, security risk, GRC or consulting experience
Experience in cyber security advisory, strategy, governance or risk
Strong knowledge of frameworks such as NIST CSF, ISO 27001, NZISM, ISM, HISF or similar
Strong report-writing and presentation skills
Confidence engaging with senior stakeholders and clients
Ability to lead consulting engagements independently
Experience across multiple cyber security domains

Experience with NZISM Certification & Accreditation, NIST CSF maturity assessments, tabletop exercises, vCISO advisory, incident response planning or cyber security strategy will be highly regarded.
Why apply?

Auckland-based hybrid role
Strong pipeline of cyber advisory work
Enterprise and public sector client exposure
Variety across strategy, risk, governance and resilience engagements
Competitive remuneration and development opportunities

If you’re an experienced Cyber Security Consultant, Security Consultant, Cyber GRC Consultant, Security Risk Consultant, Information Security Consultant or vCISO Advisor, we’d love to hear from you.
Apply now with your CV or get in touch for a confidential conversation.