About UsSydney Digital Advisory is a consulting firm focused on providing expert advisory services to government agencies and small to medium enterprises. The team consists of experienced digital and technology consultants, architects, advisers, and strategists with close to two decades of experience serving global corporations, including Fortune 50 companies. The firm offers services across management consulting, digital transformation, process optimization, change management, architecture consulting, and digital strategy, along with specialized technology consulting through its Microsoft Partner division, Sydtech Consulting.

Sydney Digital

Advisory emphasizes transparent communication, strong client relationships, and collaborative problem-solving to support growth, improve efficiency, and deliver sustainable business outcomes. The company is committed to being a trusted partner, offering both impartial advice and hands-on support at every stage of a client’s journey.

Role DescriptionWe are seeking an experienced Cyber Security Manager to help develop and deliver a cyber security uplift program. The role will focus on cyber security strategy, multi-year roadmaps, investment-ready business cases, and the management of security improvement initiatives across both Information Technology (IT) and Operational Technology (OT) environments.

The successful candidate will assess current security maturity against relevant standards and regulatory obligations, define a practical and cost-effective path forward, develop executive and board-level investment recommendations, and support the delivery of approved initiatives. This is a hands-on role requiring a combination of cyber security expertise, business acumen, stakeholder engagement, and project delivery capability. This role is open to Australian Citizens with ability to obtain a security clearance.

Key Responsibilities

- Contribute to the development and execution of enterprise cyber security strategies across IT and OT environments.
- Assess current-state cyber security maturity against applicable standards, frameworks, and regulatory obligations.




- Identify risks and recommend pragmatic mitigation strategies based on organisational priorities and risk exposure.
- Develop prioritised, costed, multi-year cyber security uplift roadmaps, including sequencing, dependencies, governance, and resource considerations.
- Prepare investment-ready business cases, including options analysis, benefits realisation, cost estimates, risk assessments, and delivery approaches.
- Facilitate workshops with business, technology, operational, and executive stakeholders to gather requirements, validate findings, and build consensus.
- Produce high-quality reports, briefing papers, recommendations, and executive presentations suitable for senior leadership and board audiences.
- Manage the delivery of cyber security initiatives, including scope, schedule, budget, risk, issue, and stakeholder management.
- Provide practical guidance to architecture, infrastructure, operations, and project teams throughout implementation.
- Establish or enhance governance structures, operating models, processes, and controls required to sustain cyber security improvements.
- Provide subject matter expertise across key security domains, including:
- Microsoft security technologies
- Identity and Access Management (IAM)
- Multi-Factor Authentication (MFA)
- Endpoint and Standard Operating Environment (SOE) security
- Network security, segmentation, monitoring, and gateways
- Security operations and incident response

Required Experience
- Demonstrated experience delivering cyber security uplift, compliance, risk management, resilience, or transformation programs.
- Experience contributing to or leading enterprise cyber security strategy development.
- Proven capability in developing costed, multi-year cyber security roadmaps and implementation plans.
- Strong experience preparing business cases,



including options analysis, benefits assessment, CapEx and OpEx modelling, and risk analysis.
- Practical experience applying cyber security frameworks and standards such as:
- ISO 27001
- NIST Cyber Security Framework (CSF)
- Essential Eight
- Information Security Manual (ISM)
- Protective Security Policy Framework (PSPF)
- Solid business writing skills, including strategies, business cases, assessment reports, and executive recommendations.
- Excellent facilitation and workshop management skills.
- Demonstrated ability to engage and influence stakeholders ranging from executive leadership through to technical specialists and business users.
- Project and program management experience, including planning, reporting, budgeting, and resource management.
- Strong business analysis skills with the ability to translate complex or ambiguous requirements into actionable outcomes.
- Knowledge of modern cyber security technologies and architectures, particularly within Microsoft-centric environments.
- Experience presenting recommendations and investment proposals to executive committees, governance bodies, or boards.
- Exposure to Operational Technology (OT) security risks and controls, including network segmentation and secure architecture principles.

Desirable Experience
- Professional consulting or advisory experience with a demonstrated ability to deliver outcomes beyond strategy and recommendations.
- Experience working within regulated, critical infrastructure, utilities, healthcare, government, transport, energy, manufacturing, or other operationally complex environments.
- Familiarity with critical infrastructure security obligations and regulatory compliance requirements.
- Experience developing cyber risk methodologies, security operating models, business criticality frameworks, or cyber governance structures.
- Experience designing and implementing cyber security awareness, education, and capability uplift programs.
- Relevant industry certifications such as CISSP, CISM, CRISC, SABSA, ISO 27001 Lead Implementer/Auditor, TOGAF, PRINCE2, MSP, or PMP.

📌 CyberSecurity Manager (Canberra)
🏢 Sydney Digital Advisory
📍 Canberra