Senior Cybersecurity Consultant

About the role

Datacom, one of Australasia's leading technology providers, is looking for a Senior Cybersecurity Consultant to lead high-impact engagements for some of New Zealand's most important organisations. The consultant works across a diverse portfolio of customers, shaping their cybersecurity posture and aligning security outcomes to business strategy, operating independently and earning trust quickly.

Key responsibilities

• Lead consulting engagements end-to-end, delivering quality outcomes on time and on budget
• Develop and present cybersecurity strategies and roadmaps tailored to each organisation's risk appetite and maturity
• Design and implement practical, sustainable governance frameworks
• Conduct cybersecurity audits and assessments across domains and industries
• Manage organisational and system-level risk and help clients prioritise what matters most
• Build and test security programmes, including system assurance, third-party/vendor assurance, incident management and security awareness
• Develop policies and compliance programmes that work in practice
• Engage with senior leaders, technical specialists and others in workshops, writing and one-on-one
• Mentor and support colleagues through knowledge sharing and hands-on guidance

Required profile

• Extensive cybersecurity experience spanning governance, risk, technology and operations
• Demonstrated consulting experience, able to deliver independently and manage competing priorities
• Relevant tertiary or professional qualifications or relevant experience
• Natural communicator, analytical and able to handle multiple projects
• Understanding of the intersection between cybersecurity and privacy

Required skills

• Working knowledge of NIST CSFv2, NIST SP800-53, ISO 27001/27002/27005, IEC 62443, PCI-DSS, SOC2 Type I/II and ASD Essential 8
• Familiarity with NZ and Australian guidance such as NZ PSR, NCSC Minimum Cyber Security Standards, HISO 10029/HISF, NZ ISM, AU ISM and the NZ Privacy Act 2020
• Hands-on PCI-DSS experience including scoping, SAQ selection and issuer/processor/acquirer relationship management
• Desirable certifications: ISO 27001 Lead Implementor/Auditor, CISM, CRISC

What we offer

• Paid parental leave
• 24/7 Employee Assistance Programme (DataCare)
• Ongoing learning, certifications and career development
• Learning platforms, recognition programmes and employee discounts