Job Description

We are delivering an enterprise exposure management and asset visibility capability for a major Australian client with a converged IT, OT and IoT estate. You will lead the technical design, deployment and operational handover of the platform, and turn raw asset discovery data into a risk picture the client’s security leadership can act on.

This is a hands-on delivery role with significant client exposure. You will work alongside the practice lead and a senior consultant, and you will be the technical authority on the engagement.

What you’ll do

- Design and deploy an agentless asset discovery and exposure management platform across corporate IT, cloud, OT and unmanaged device estates
- Plan and execute protected active scanning in fragile environments, including production OT and legacy embedded systems, without operational disruption




- Build and tune asset fingerprinting, classification and ownership models across a large, heterogeneous estate
- Integrate discovery data with the client’s existing CMDB, vulnerability management, EDR and SIEM tooling via API
- Develop risk prioritisation logic, dashboards and executive reporting that map findings to NIST CSF, the Essential Eight and the client’s regulatory obligations
- Identify unmanaged, unagentable and end-of-life assets, and drive remediation plans with asset owners
- Validate network segmentation integrity and map attack paths across IT and OT boundaries
- Produce operational runbooks and transition the capability to the client’s BAU security team

📌 Senior Consultant - Exposure Management & Asset Visibility (Melbourne)
🏢 NCS Australia
📍 Melbourne