Salary: $160k-180k Annually
About the Role
We're looking for an experienced Cyber Security Consultant to join a large enterprise environment and help shape how security is embedded across technology delivery.
This isn't a traditional GRC (Governance, Risk, Compliance) role, nor is it a hands-on Security Engineer position. You'll get involved early in technology initiatives, working alongside architects, engineers and delivery teams to understand what they're building, identify threats and risks, apply appropriate security patterns and controls, and influence solutions before they're implemented.
Approximately 50-60% of the role will focus on project and delivery advisory, with the remaining time focused on strengthening the organisation's wider security capability through reusable architecture patterns, controls, guardrails and assurance practices.
What You'll Be Doing - Partner with architects, engineers and delivery teams to embed security into technology initiatives from the design stage
- Review solution architectures and designs, identify threats and risks, and provide pragmatic security advice throughout implementation
- Develop reusable security architecture patterns, principles, controls and guardrails that teams can consistently apply across future solutions
- Establish and mature threat modelling, security testing and implementation assurance practices
- Provide security input across cloud, SaaS, applications, infrastructure, IAM, PAM, networking and third-party solutions
- Support high-risk vendor assessments, complex security incidents and post-incident assurance activities
- Influence the wider cyber security roadmap by identifying emerging risks, lessons learned and opportunities to improve organisational security maturity
What We're Looking For - 10+ years' across technology domains with at least 6+ years' experience across cyber security, security architecture, technology risk or security assurance, including senior advisory-level experience
- Strong technical understanding across areas such as cloud, IAM/PAM, networks, applications, infrastructure, SaaS and security controls
- Proven experience working with architecture and engineering teams to identify threats, assess proposed designs and influence secure technical solutions
- Experience developing practical security patterns, controls, guardrails and secure-by-design approaches that can be reused across technology teams
- Strong understanding of security frameworks such as CIS, PCI DSS, ISO 27001, NIST, NZISM or similar, with the ability to translate frameworks into practical controls
- Excellent stakeholder management and communication skills, with the confidence to constructively challenge technical teams and influence senior stakeholders
- Strong commercial judgement with the ability to balance security risk against practical delivery and operational requirements
- Must have valid NZ work authorization to be considered
Nice to Have - CISSP, CISM, CISA, ISO or similar security certification
- Experience working within large, complex enterprise technology environments
- Exposure to regulated, critical infrastructure or security-conscious organisations
- Experience developing threat modelling and security testing assurance practices
- Tertiary qualification in IT, Computer Science or a related discipline
What's on Offer - Permanent senior cyber security opportunity within a large enterprise environment
- Hybrid working based in Auckland
- Opportunity to influence security architecture and technology delivery across major initiatives
- Genuine scope to build security capability rather than simply assess projects against existing controls
- Work closely with senior architects, technology leaders and business stakeholders
Apply Now! If you're a senior cyber security practitioner who enjoys getting into architecture conversations early, challenging designs constructively and turning security principles into practical solutions, we'd love to hear from you.
Please note: Every application is personally reviewed. Only candidates whose experience closely aligns with the requirements of the role will be contacted.
LK-4074329