
Cyber Security Consultant
- Sydney, NSW
- Permanent
- Full-time
- Exciting opportunity to be part of our growth transformation
- Looking for candidates with experience in MSP/MSSP
- Open to candidates from Sydney/ Melbourne or Brisbane
- Manage and operate key security technologies including Endpoint Detection and Response (EDR), SIEM, Email Security, and Secure Service Edge (SSE). Conduct regular vulnerability assessments and work closely with client IT teams to coordinate timely remediation. Lead incident response efforts, especially within Microsoft 365 environments, covering all phases from detection to recovery.
- Utilise Governance, Risk & Compliance (GRC) platforms to assess, monitor, and report on clients' cybersecurity maturity levels against industry frameworks. Lead gap assessments, risk analyses, control reviews, and policy evaluations to support clients in achieving regulatory compliance and strengthening their security posture.
- Provide expert guidance and implementation support across the Microsoft security ecosystem, including Entra ID, Intune, Microsoft Defender (Endpoint & Cloud), Microsoft Purview, and M365 compliance features. Help clients enhance identity management, endpoint protection, cloud security, and data governance.
- Design and implement tailored cybersecurity programs aligned with client business goals and security frameworks. Define strategic roadmaps, security controls, and risk mitigation plans to ensure robust and scalable security practices.
- Act as a trusted virtual Chief Information Security Officer (vCISO) for designated clients, delivering ongoing strategic oversight, leadership, and cybersecurity direction. Guide clients through complex security challenges and oversee the execution of cybersecurity initiatives.
- Lead regular security briefings and prepare executive-level reports that communicate key risks, metrics, and insights. Engage with client leadership teams and boards to provide clear, actionable advice on cybersecurity threats, trends, and priorities.
- Extensive experience working in cyber security with a focus on GRC and Managed Security Services and excellent understanding of Australia Privacy Law.
- A demonstrated track record of providing impactful client outcomes through high-quality delivery
- Strong experience in applying a strategic mindset and understanding how engagements fit into a broader business context
- Experience identifying opportunities and helping qualify and sell engagements
- Strong people leadership qualities, including personal presence and the ability to engage with senior client stakeholders
- Ability to communicate ideas and concepts with structure, clarity, and precision
- Skill in leading client meetings and presenting findings with confidence and presence
- Strong knowledge of security frameworks such as Essential 8, ISO 27001, NIST, RFFR, SMB1001, APRA CPS 234, PCI-DSS, GDPR etc.
- Microsoft Certifications such as SC-100, 200, 300 and AZ500
- Other certifications such as CISA, CISM, CISSP
- 12 weeks full pay parental leave
- In house training and development and Generous Educational Assistance policy
- Diverse Career Development opportunities
- Employee Discounts through our “Gold Pass” rewards platform
- Income Protection and Life Insurance
- Salary Packaging & Novated Leasing available