Senior Cyber Security Consultant

About the Role

This is a broad, customer-facing cybersecurity role for someone who enjoys working across security consulting, governance, risk, compliance and technical security rather than being confined to one specialist area.

You will work directly with customers, technical teams and senior stakeholders to translate security requirements into practical, achievable outcomes.

The role spans customer consulting and project delivery, security assessments, ISO 27001 and ISMS activities, Australian Government security frameworks, security documentation, solution design and pre-sales support. You will also work alongside our Cyber61 Managed SOC team where required.

What You’ll Be Doing

You will:

·       Deliver cybersecurity consulting and advisory engagements for government and commercial customers.

·       Undertake cybersecurity risk assessments and develop practical risk treatment strategies.

·       Interpret security frameworks and translate requirements into implementable security controls.

·       Advise customers on secure architecture, design, implementation and configuration of ICT environments.

·       Work with frameworks including the ASD Information Security Manual (ISM), Essential Eight, PSPF, DISP/DSPF and ISO/IEC 27001.

·       Support the operation and continual improvement of Digital61’s ISO 27001 Information Security Management System.

·       Develop security policies, standards, procedures, plans, risk assessments and security documentation.

·       Support security assurance and compliance activities across customer environments.

·       Contribute cybersecurity expertise to proposals, tenders, solution design and pre-sales engagements.

·       Work closely with our consultants, architects, engineers and SOC team to deliver end-to-end security outcomes.

·       Maintain awareness of emerging cyber threats, adversary techniques and industry developments.

·       Build trusted relationships with customers and communicate complex security concepts clearly to both technical and executive audiences.

About You

We are looking for someone who combines strong cybersecurity knowledge with consulting capability.

Ideally, you will have:

·       Demonstrated experience in cybersecurity consulting, information security, GRC or security assurance.

·       Strong knowledge of ISO 27001, including implementation, operation or auditing of an ISMS.

·       Experience with Australian Government cybersecurity frameworks such as ISM, Essential Eight and PSPF.

·       Experience undertaking cybersecurity risk assessments and developing treatment plans.

·       A good understanding of security control design and implementation.

·       Experience delivering security projects or consulting engagements directly with customers.

·       Strong written skills and the ability to produce high-quality security documentation.

·       Confidence communicating with technical teams, executives and customer stakeholders.

·       The ability to manage multiple customer engagements and priorities.

·       A pragmatic mindset. You can interpret a framework, understand the risk and help a customer work out what actually needs to be done.

Qualifications & Clearance

Highly regarded:

·       CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Lead Auditor or equivalent cybersecurity certification.

·       Experience working within Australian Government environments.

·       Experience with DISP and/or Defence security requirements.

·       Experience supporting security operations, incident response or SOC environments.

·       Microsoft security experience, particularly across Microsoft 365, Defender, Sentinel, Entra ID and Azure.

·       Experience contributing to tenders, proposals and customer solution design.

Security requirements:

Applicants must be Australian citizens and hold an NV1 or higher security clearance.

Why Digital61?

This isn’t a role where you’ll spend every day doing the same type of assessment.

You’ll have the opportunity to work across a diverse portfolio of cybersecurity engagements, from security strategy and risk through to architecture, compliance, managed security and operational security.

You’ll work with experienced technology and cybersecurity professionals, have direct exposure to customers and senior stakeholders, and play an important role in the continued growth of our Cyber61 practice.

We value people who are commercially aware, customer focused, move with pace and continually look for better ways of doing things. These themes are also reflected in the existing role’s accountability areas of business acumen, customer obsession, velocity, continuous improvement and personal growth.

If you’re an experienced cybersecurity professional who enjoys solving real customer problems and wants exposure across consulting, GRC, security architecture and managed security, we’d love to hear from you.