Cyber Security Consulting Team Lead

Core Duties:

The Cyber Security Consulting Team Lead manages the Consulting Team to deliver end-to-end cyber

security consulting services, undertaking duties that include, but are not limited to:

• Conducting comprehensive cyber security risk assessments and audits of client technical environments (cloud and on-premise) and policies and procedures, utilising practical implementation knowledge to provide insightful and actionable findings
• Evaluating client security controls against recognised standards (e.g., PCI DSS, IRAP, ISM, ISO 27001, SOC2, NIST, Essential Eight) and legislative requirements, identifying vulnerabilities, risks, and compliance gaps
• Providing expert advice and direct assistance in the design, implementation, configuration, and remediation of security controls, technologies, policies and procedures based on assessment outcomes and client objectives
• Developing and customising client-specific cyber security documentation, including policies, procedures, and governance frameworks aligned with best practices
• Advising and actively supporting clients throughout the process of preparing for and achieving cyber security certifications (e.g., PCI DSS, IRAP, ISM, ISO 27001, SOC2), including readiness assessments and evidence preparation
• Serving as a subject matter expert and trusted advisor, providing tailored strategic guidance and maintaining strong client relationships to understand business context and security requirements
• Preparing detailed reports documenting assessment findings, implementation activities, compliance status, and strategic recommendations
• Working with the development team to implement automated or technological solutions which streamline client processes, especially with regard to intensive tasks such as audit evidence gathering and log monitoring activities
• Meeting implemented KPIs related to performance of the Consulting team
• People management responsibilities related to the Consulting team including, but not limited to, regular performance reviews, client escalations, oversight of day to day tasks and priorities, internal reporting, etc.

Qualifications & Experience

• Tertiary qualification in Information Technology, Cyber Security, Computer Science, or a related field, or equivalent demonstrated industry experience
• A minimum of 2 years demonstrated professional experience in cyber security consulting, encompassing both security assessment/audit and technical implementation activities
• Proficient knowledge and practical application experience with recognised cyber security frameworks and standards (e.g., PCI DSS, IRAP, ISM, ISO 27001, SOC2, NIST Cyber Security Framework, Essential Eight)
• Experience in implementing security controls, technologies, and governance frameworks within diverse IT environments
• Strong analytical skills with the ability to assess complex systems and identify security risks and control weaknesses
• Excellent written and verbal communication skills, with the ability to convey technical information clearly to varied audiences, including senior management
• Experience in managing small teams of up to 5 resources
• Proven ability to manage client engagements and deliverables effectively
• Relevant industry certifications are highly regarded (e.g., CISSP, CISM, CISA, ISO 27001 Lead Auditor / Lead Implementer)

Job Types: Full-time, Permanent

Pay: $100,000.00 – $120,000.00 per year

Work Location: In person