Job Description
n
Support delivery of cyber risk consulting engagements, including cyber risk assessments, maturity reviews, control reviews, incident response readiness, and tabletop exercises
n
Assess cyber security risks, vulnerabilities, impacts, and control gaps across people, process, technology, and third-party environments
n
Assist in preparing incident response plans, playbooks, and board- or executive-level workshop materials
n
Contribute to client advisory work on cyber governance, policies, security frameworks, and resilience uplift roadmaps
n
Review and analyse security controls against ISO *****, NIST, CPS 234, and ASD Essential Eight
n
Support evaluation of security technologies, vendors, and implementation approaches
n
Help quantify cyber risk and communicate findings to support decision-making and investment prioritisation
n
Build client and internal relationships
n
Support business development activities and contribute to proposals, thought leadership, and marketing initiatives
n
Work collaboratively with senior team members and provide guidance to junior colleagues where appropriate
n
n
Requirements
n
n
2–4 years of experience in cyber security, cyber risk, technology risk, or a related consulting role
n
Experience in risk assessments, security reviews, incident response planning, and/or cyber resilience work
n
Sound understanding of cyber security concepts, frameworks, and control domains, including governance, vulnerability management, identity and access management, cloud security, and third-party risk
n
Strong written and verbal communication skills, including ability to explain technical matters to non-technical audiences
n
Strong analytical, problem-solving,



and stakeholder management skills
n
Knowledge of and experience working with ISO *****, NIST, CPS 234, and ASD Essential Eight
n
Professional certifications such as CISM, CISSP, CRISC, CISA, or equivalent
n
Ability to manage competing priorities, work well in a team, and operate effectively in a client-facing environment
n
Commercial awareness and interest in developing advisory and consulting skills
n
Appropriate approval to work in Australia
n
Successful completion of a Criminal & Bankruptcy check prior to commencing employment
n
n
Core Competencies
n
Demonstrates expertise in cyber risk assessments, incident response planning, and security frameworks, with a solid ability to communicate complex technical concepts to diverse audiences. Proven experience in managing client relationships and contributing to business development in a consulting environment.
n
Highest-signal resume keywords
n
n
Cyber Risk Assessment
n
Incident Response Planning
n
ISO *****
n
NIST
n
CISM
n
n
Hard Skills
n
n
Cyber Security
n
Risk Assessment
n
Control Review
n
Vulnerability Management
n
Identity And Access Management
n
Cloud Security
n
Third-Party Risk
n
Security Frameworks
n
Analytical Skills
n
Problem-Solving
n
n
Soft Skills
n
n
Written Communication
n
Verbal Communication
n
Stakeholder Management
n
Team Collaboration
n
Client-Facing Skills
n
n
Certifications & Qualifications
n
n
CISM
n
CISSP
n
CRISC
n
CISA
n
n
Industry Keywords
n
n
Cyber Risk
n
Cyber Governance
n
Security Controls
n
Incident Response Readiness
n
Resilience Uplift Roadmaps
n
ASD Essential Eight
n
CPS 234
n
Commercial Awareness
n

📌 Consultant - Cyber Risk Consulting (New South Wales)
🏢 Jobtailor
📍 New South Wales