Work closely with the client CISO/vCISO/ISM in the delivery of the client cybersecurity strategy, including supporting the planning and implementation of cybersecurity activities which improves the client’s cybersecurity posture.
Analysis of customer environments against IT security best practice or standards such as NZISM, ISO27001 or NIST and identification of appropriate measures that can be undertaken to achieve best practice and compliance.
Assist with the development of technical information materials and participate workshops on information security trends, threats, good practices and control mechanisms as appropriate.
Provide operational management oversight in the form of monthly reporting that spans across cybersecurity incidents, server patching, security enhancements and the management of elevated permissions etc
Participate in incident response as part of the clients CSIRT.
Participate in risk management activities as part of the client’s Risk Management team.
Provide Operational Security support and function, where required.
Participate in Tabletop exercises where required.
Oversight or involvement in the Vulnerability Management Lifecycle.
Providing cybersecurity advice to clients.
Assist in the development and the delivery of the information security awareness training program for client and Datacom personnel, as required.
Assist the clients in responding to internal and external audit assessments.

Proven years of experience in an IT Security or Cybersecurity role
At least 5+ years of experience in general IT
Technical background in security/networking, compute, cloud and general IT is advantageous
Experience with using popular vulnerability scanning tools such as Microsoft Defender, Rapid7, Qualys, Tenable, etc.
Experience within a complex organisation is beneficial for this role, as is any experience within a Managed Services provider as a Consultant.
Strong knowledge of information security topics and an ability to provide advice for the information security steering committee, change management committee and other agency and inter-agency committees.
Experience in conducting security risk assessments and multi year experience in risk management is beneficial.
A genuine passion for Cyber/IT Security and maintaining an up to date security knowledge base comprising of a technical reference library, security advisories and alerts, information on information security trends and practices, and relevant laws, regulations, standards and guidelines.

Associate Cybersecurity Consultant

Key skills