Cyber Security Consultant

We are looking for a Security Consultant to join our growing Strategy and Risk team. As an experienced consultant you will combine technical understanding and governance expertise with excellent stakeholder engagement. At CyberCX you will work with clients across both the public and private sectors, delivering trusted advice, leading cyber security initiatives, and supporting organisations to build and maintain effective security capabilities.

\n
• Work with clients across public and private sectors, delivering trusted advice, leading cyber security initiatives, and supporting organisations to build and maintain effective security capabilities.
\n
• Lead discovery and consultation activities with client stakeholders to shape recommendations and outcomes.
\n
• Prepare high‑quality proposals, reports and presentations for senior client stakeholders.
\n
• Manage client expectations with professionalism, clarity and confidence.
\n

\n
• 3+ years’ experience in corporate or government IT security.
\n
• Proven ability to translate technical risk into business risk, strategy and action.
\n
• Strong report writing skills.
\n
• Experience across multiple cyber security domains, such as risk assessment and risk management.
\n
• Experience with cyber security frameworks including NIST CSF, ISM and ISO/IEC 27001.
\n
• Experience with security research or related disciplines.
\n
• Proven experience in two or more of the following areas: \n
  \n
  • Leading NIST Cybersecurity Framework (CSF) maturity assessments to evaluate and enhance clients’ cybersecurity capabilities.
  \n
  • Managing and delivering NZISM Certification & Accreditation (C&A) activities for New Zealand public sector organisations.
  \n
  • Designing, facilitating, and leading cybersecurity tabletop exercises to assess incident preparedness and strengthen organisational resilience.
  \n
  • Providing trusted security advisory and virtual Chief Information Security Officer (vCISO) services, supporting executive‑level decision‑making and governance.
  \n
  • Developing and implementing cybersecurity strategies, target operating models, and transformation roadmaps aligned to business objectives and risk appetite.
  \n
  • Creating, reviewing, and uplifting cybersecurity policy frameworks, standards, and procedures, including Incident Response Plans and supporting governance documentation.
  \n
  • Advising clients on cybersecurity risk management, regulatory compliance, and best‑practice security controls to improve overall security posture.
  \n
\n
• This role requires strong stakeholder engagement and writing skills, and the ability to lead client engagements independently.
\n
• A passion for helping organisations build resilient and effective cybersecurity capabilities.
\n

\n
• Flexible hybrid working with a mix of office and work‑from‑home arrangements.
\n
• Competitive remuneration that reflects your experience.
\n
• The option to purchase extra leave.
\n
• A comprehensive health and wellbeing program, including Employee Assistance support.
\n
• Discounts on health insurance, gym memberships and everyday expenses.
\n
• Personalised development planning, training opportunities and membership support for industry organisations.
\n
• A meaningful reward and recognition program that celebrates your contribution.
\n

Be yourself. We embrace diverse perspectives, experiences, and backgrounds. Please let us know if you require support or adjustments to assist with your recruitment experience.

We take security seriously. All employees are required to complete background checks (including police and global sanction list checks) annually.