Cyber Security Consultant – GRC (Strategy & Risk)

About the role

CyberCX is seeking an experienced Cyber Security Consultant to join its Strategy and Risk team. You will work with public and private sector clients across New Zealand, delivering trusted advice, leading security initiatives, and helping organisations build resilient security capabilities.

Key responsibilities

• Lead NIST Cybersecurity Framework maturity assessments and enhance client capabilities.
• Manage NZISM certification and accreditation activities for public‑sector organisations.
• Design and facilitate cyber security tabletop exercises to test incident preparedness.
• Provide virtual CISO services and executive‑level security advisory.
• Develop cyber security strategies, target operating models and transformation roadmaps.
• Create, review and uplift security policies, standards, procedures and incident response plans.
• Advise on risk management, regulatory compliance and best‑practice controls.
• Lead discovery and consultation activities with client stakeholders.
• Prepare high‑quality proposals, reports and presentations for senior stakeholders.

Required profile

• Strong communicator and trusted advisor able to translate technical risk into business insight.
• 3+ years experience in corporate or government IT security.
• Proven ability to produce clear, actionable reports.
• Experience across multiple cyber security domains such as risk assessment, governance and frameworks.

Required skills

• NIST Cybersecurity Framework (CSF)
• NZISM certification processes
• ISO/IEC 27001 standards
• Risk assessment and risk management
• Security policy development and incident response planning

What we offer

• Flexible hybrid working (office and remote)
• Competitive remuneration reflecting experience
• Option to purchase extra leave
• Comprehensive health and wellbeing program