Job Description

n
- Support delivery of cyber risk consulting engagements, including cyber risk assessments, maturity reviews, control reviews, incident response readiness, and tabletop exercises
n
- Assess cyber security risks, vulnerabilities, impacts, and control gaps across people, process, technology, and third-party environments
n
- Assist in preparing incident response plans, playbooks, and board- or executive-level workshop materials
n
- Contribute to client advisory work on cyber governance, policies, security frameworks, and resilience uplift roadmaps
n
- Review and analyse security controls against ISO 27001, NIST, CPS 234, and ASD Essential Eight
n
- Support evaluation of security technologies, vendors, and implementation approaches
n
- Help quantify cyber risk and communicate findings to support decision-making and investment prioritisation
n
- Build client and internal relationships
n
- Support business development activities and contribute to proposals, thought leadership, and marketing initiatives
n
- Work collaboratively with senior team members and provide guidance to junior colleagues where appropriate
n

n

Requirements

n

n
- 2–4 years of experience in cyber security, cyber risk, technology risk, or a related consulting role
n
- Experience in risk assessments, security reviews, incident response planning, and/or cyber resilience work
n
- Sound understanding of cyber security concepts, frameworks, and control domains, including governance, vulnerability management, identity and access management, cloud security, and third-party risk
n
- Strong written and verbal communication skills, including ability to explain technical matters to non-technical audiences
n
- Strong analytical, problem-solving,



and stakeholder management skills
n
- Knowledge of and experience working with ISO 27001, NIST, CPS 234, and ASD Essential Eight
n
- Professional certifications such as CISM, CISSP, CRISC, CISA, or equivalent
n
- Ability to manage competing priorities, work well in a team, and operate effectively in a client-facing setting
n
- Commercial awareness and interest in developing advisory and consulting skills
n
- Appropriate approval to work in Australia
n
- Successful completion of a Criminal & Bankruptcy check prior to commencing employment
n

n

Core Competencies

n

Demonstrates expertise in cyber risk assessments, incident response planning, and security frameworks, with a strong ability to communicate complex technical concepts to diverse audiences. Proven experience in managing client relationships and contributing to business development in a consulting environment.

n

Highest-signal resume keywords

n

n
- Cyber Risk Assessment
n
- Incident Response Planning
n
- ISO 27001
n
- NIST
n
- CISM
n

n

Hard Skills

n

n
- Cyber Security
n
- Risk Assessment
n
- Control Review
n
- Vulnerability Management
n
- Identity And Access Management
n
- Cloud Security
n
- Third-Party Risk
n
- Security Frameworks
n
- Analytical Skills
n
- Problem-Solving
n

n

Soft Skills

n

n
- Written Communication
n
- Verbal Communication
n
- Stakeholder Management
n
- Team Collaboration
n
- Client-Facing Skills
n

n

Certifications & Qualifications

n

n
- CISM
n
- CISSP
n
- CRISC
n
- CISA
n

n

Industry Keywords

n

n
- Cyber Risk
n
- Cyber Governance
n
- Security Controls
n
- Incident Response Readiness
n
- Resilience Uplift Roadmaps
n
- ASD Essential Eight
n
- CPS 234
n
- Commercial Awareness
n

📌 Consultant - Cyber Risk Consulting (New South Wales)
🏢 Jobtailor
📍 New South Wales