Manager, Cybersecurity & Privacy

JOB REQUISITION Manager, Cybersecurity & Privacy LOCATION SYDNEY ADDITIONAL LOCATIONS JOB DESCRIPTION At Protiviti, we believe in empowering our employees. We value diversity and inclusion and celebrate the unique perspectives each employee brings. Our nurturing culture fosters teamwork and growth opportunities that allow individuals to thrive both personally and professionally. Protiviti is a global business consulting firm composed of experts specialising in advisory, risk and assurance services. We help clients solve problems in finance, operations, technology, governance, risk, and compliance. Our highly trained, results-oriented professionals serve clients in the Americas, Asia-Pacific, Europe and the Middle East and provide a unique perspective on a wide range of critical business issues. Our culture prides itself on nurturing talent through mentorship and providing opportunities for continuous learning. With us: You'll tackle diverse challenges that enrich your skills. You'll collaborate with thought leaders who are eager to share their knowledge. You'll enjoy perks that support work-life balance and personal development. What You’ll Do: As a key member of the Cybersecurity team, Managers deliver technically rigorous assessments, design secure architectures, lead remediation efforts, and drive the implementation of enterprise-grade controls. You’ll work with diverse Australian and international organisations across cloud, on-premises, and hybrid environments. This role combines technical depth and strategic oversight, acting as a trusted advisor while leading client engagements end-to-end. Cybersecurity Engineering & Architecture: Lead advanced assessments across cloud, network, application, and endpoint layers. Evaluate enterprise security using frameworks like NIST CSF and Zero Trust, and design modern security controls while optimizing client security tools. Technical Risk Assessment & Threat Mitigation: Conduct threat modeling with methodologies such as STRIDE and MITRE ATT&CK. Perform gap assessments, identify vulnerabilities, and recommend remediation strategies to enhance incident detection and response. Cloud & Modern Security Technologies: Develop secure cloud architectures for AWS, Azure, and GCP, focusing on IAM and encryption. Review configurations and lead remediation programs for cloud-native applications. Digital Identity & Access Management: Design and assess IAM strategies, including SSO and MFA. Evaluate identity governance and provide recommendations to strengthen resilience. Data Protection & Privacy Engineering: Implement data classification and DLP controls across environments. Conduct privacy risk assessments aligned with GDPR and ISO 27701. Client Engagement & Delivery Leadership: Lead technical delivery teams, manage planning and execution for complex engagements, and mentor consultants. Build trusted client relationships to support long-term cybersecurity maturity. Consultative Expertise: Conduct cybersecurity evaluations to identify risks and implement stringent protocols. Advise clients on data protection methods and collaborate with IT departments for seamless integration. Engagement Management: Oversee client engagements, including risk assessments and reporting. Support Senior Leaders during planning and execution phases to ensure client needs are met. What We’re Seeking: Experience: Minimum 5+ years in cybersecurity engineering, architecture, consulting, or related technical roles. Technical Skills: Strong hands-on expertise in cloud security, network security, IAM, threat modeling, vulnerability management, incident response, SIEM, and detection engineering. Frameworks & Standards: Deep knowledge of ISO 27001, NIST CSF, NIST 800 series, CIS Controls, SOC 2, PCI-DSS, Essential 8, and Zero Trust models. Certifications: Preferred certifications include CISA, CISSP, CISM, CCSP, CCSK, CCAK, and cloud certifications (AWS/Azure/GCP Security Specialty). Project Management: Credentials such as CSM, SAFe, PMP, PRINCE2, or Agile are highly regarded. Explore Protiviti Learn more about our corporate responsibility - https://www.protiviti.com/au-en/corporate-responsibility Explore what life is like at Protiviti - https://www.protiviti.com/au-en/life-at-protiviti Understand our commitment to inclusion - https://www.protiviti.com/au-en/inclusion-programme Our Benefits At Protiviti, we are dedicated to supporting you at every stage of your journey. Our comprehensive benefits are designed to help you thrive both at work and beyond, providing meaningful support for your financial wellbeing, health, and personal growth. Earn More: Enjoy an incentive compensation plan that includes bonuses at all levels to maximize your earnings. Investment in Your Growth: Access our Study Assistance Program for business-related courses. Benefit from coverage for professional membership fees (up to two per year). Participate in our tailored learning and development program, featuring online courses, milestone training, and leadership development aligned with your interests and career goals. Health & Wellbeing Support: Utilize our Wellness Academy, which includes health tools, Employee Assistance Programs (EAP), and work-life resources. Take advantage of flu vaccinations, skin checks, a mindfulness program, and discounted health insurance and gym memberships. See the World: Join our Global Mobility Program for international career growth opportunities. Connect with Others: Engage in regular social events and team bonding activities. Diversity, Equity & Inclusion: Participate in our employee networks, including Women in Leadership, Multicultural, LGBTQ+, and Parents groups. And More: We believe that meaningful work should be supported by meaningful benefits, and we are committed to providing a variety of offerings to enhance your experience at Protiviti. Protiviti is not licensed or registered as a public accounting firm and does not issue opinions on financial statements or offer attestation services.