CyberCX - Security Transformation Manager

We are looking for a Security Transformation Manager to join our growing Strategy and Risk team. As an experienced consultant you will combine technical understanding and governance expertise with excellent stakeholder engagement.

At CyberCX you will work with clients across both the public and private sectors, delivering trusted advice, leading cyber security initiatives, and supporting organisations build and maintain effective security capabilities.

The preferred candidate will have proven experience in two or more of the following areas:

Leading NIST Cybersecurity Framework (CSF) maturity assessments to evaluate and enhance clients’ cyber security capabilities.

Managing and delivering NZISM Certification & Accreditation (C&A) activities for New Zealand public sector organisations.

Designing, facilitating, and leading cyber security tabletop exercises to assess incident preparedness and strengthen organisational resilience.

Providing trusted security advisory and virtual Chief Information Security Officer (vCISO) services, supporting executive-level decision-making and governance.

Developing and implementing cyber security strategies, target operating models, and transformation roadmaps aligned to business objectives and risk appetite.

Creating, reviewing, and uplifting cyber security policy frameworks, standards, and procedures, including Incident Response Plans and supporting governance documentation.

Advising clients on cyber security risk management, regulatory compliance, and best-practice security controls to improve overall security posture.

Lead discovery and consultation activities with client stakeholders to shape recommendations and outcomes

Prepare high-quality proposals, reports and presentations for senior client stakeholders

Manage client expectations with professionalism, clarity and confidence

This role requires strong stakeholder engagement and written skills, the ability to lead client engagements independently, and a passion for helping organisations build resilient and effective cyber security capabilities.

Preferred Qualifications, Experience & Skills

At least five years of experience in a global consulting firm or large technology organisation, with a focus on cyber security; experience in privacy, data management, or strategic risk is advantageous.

Ability to communicate ideas and concepts with structure, clarity, and precision.

Bachelor’s or master’s degree in cyber security, business administration, accounting, finance, information systems, computer engineering, or a related field.

Experience coaching, mentoring, and leading others to build capability, strengthen engagement, foster a positive learning environment, and deliver high‑quality outcomes for customers.

A proven track record of delivering impactful client outcomes through high‑quality execution, effective team leadership, and appropriate delegation.

Strong ability to apply a strategic mindset and understand how engagements align with broader business objectives.

* Experience identifying opportunities and contributing to the qualification and sale of new engagements.