Senior Advisory Consultant

For more than 65 years, Kordia has proudly kept New Zealanders and their businesses safe, connected and ready for the future. Operating across New Zealand, Australia and the Pacific, we deliver mission-critical solutions spanning telecommunications, cloud and cyber security.

Our cyber security business, Aura, works with organisations across New Zealand to help them understand their risks, strengthen their security posture and make better security decisions.

Ko tā mātou mahi – About the role

We’re looking for an experienced Senior Advisory Consultant to join our Cyber Consulting team.
This is a client-facing role where you’ll work with organisations to understand their cyber security challenges, assess risk and maturity, and provide practical advice on how to improve.

You’ll work across governance, risk and compliance, security strategy and technical security considerations, engaging with people at all levels of an organisation. The work will include assessing current security practices, identifying gaps and risks, helping customers set security objectives and developing realistic plans for improvement.

We’re particularly interested in someone with some security architecture or technical design experience. You don’t need to have worked as a dedicated Security Architect, but you should be confident reviewing proposed solutions and designs, identifying security considerations and asking the right technical questions.

Just as importantly, you’ll be pragmatic. Good security advice isn’t about recommending the most complex or restrictive solution. You’ll understand the customer’s environment, risk appetite and commercial realities, and help them land on an approach that is secure, proportionate and achievable.

Ko tō mahi – What you will do

You’ll be involved in a varied mix of advisory and consulting work, including:

• Assessing organisations’ cyber security maturity, practices and controls
• Providing advice across cyber security governance, risk and compliance
• Helping customers develop security strategies, objectives and improvement roadmaps
• Identifying regulatory, legislative and industry requirements and translating these into practical actions
• Reviewing security risks, vulnerabilities and the effectiveness of existing controls
• Reviewing solution or security designs and providing pragmatic security guidance
• Producing clear reports, recommendations and presentations for technical and non-technical audiences
• Facilitating discussions with customers and influencing stakeholders to reach workable outcomes
• Supporting customer scoping conversations and contributing to statements of work
• Keeping up to date with emerging threats, security technologies and industry developments

The role involves a high level of formal documentation and presenting findings to both technical and non-technical audiences.

Nā tōu rourou – What you will bring

You’ll bring solid experience in cyber security advisory, consulting, governance, risk or a related security discipline.
We’re looking for someone with:

• Strong knowledge of cyber security governance, risk and compliance
• The ability to assess complex security issues and turn them into clear, practical recommendations
• Strong client-facing, communication and influencing skills
• Confidence working with both technical specialists and senior business stakeholders
• A pragmatic approach to balancing security, risk, usability and commercial requirements
• The ability to work through ambiguity and make progress without everything being perfectly defined
• Strong written skills and attention to detail
• Experience reviewing security architecture, solution designs or technical controls would be a strong advantage
• Relevant certifications such as CISSP, CISM, CISA or CRISC would be beneficial, but are not essential

Nōu te rourou – Why join us?

You’ll have the opportunity to do high-quality cyber security work without feeling like a small part of a huge global consulting machine. We’re New Zealand based and owned, and you’ll work closely with experienced cyber professionals who understand the local market and the organisations we support.

We offer flexibility around how you work, and we believe there should be a clear boundary between work and the rest of your life. Consulting can be demanding, but we don’t believe long hours should simply be accepted as part of the job. You’ll also get:

• Interesting advisory work across a wide range of organisations and industries
• Exposure to both business and technical cyber security challenges
• Support to continue developing your technical and consulting capability
• The opportunity to learn from experienced security practitioners across Aura
• A collaborative, down-to-earth environment where good ideas and practical thinking are valued

If you’re an experienced cyber security professional who enjoys working with customers, solving complex problems and giving advice that people can actually put into practice, we’d love to hear from you.

Alongside this, we offer matched employer superannuation contributions of up to 5%, learning and development support, internal career pathways, flexible working, enhanced parental leave, wellbeing initiatives and insurance benefits.