Cyber Risk and Resilience - Senior Consultant - Cybersecurity

Cyber Risk and Resilience - Senior Consultant - Cybersecurity

Location: Auckland

Other locations: Primary Location Only

Salary: Competitive

Date: 24 Jun 2026

Job description

Requisition ID: 1713884

At EY, were all in to shape your future with confidence.

Well help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

Nāu te rourou, nāku te rourou, ka ora ai te iwi

With your contribution and my contribution, together we will thrive.

Hei Oranga Iwi | The opportunity

This is a hybrid position is based in our Tāmaki Makaurau (Auckland)

Join a growing cyber team helping organisations navigate increasingly complex threats and build stronger, more resilient operations. As a Senior Consultant - Cyber Risk and Resilience, you will work on meaningful client challenges and deliver practical outcomes that strengthen cyber maturity, resilience, and decision-making.

This opportunity is suited to someone with 3–5 years of experience in cyber security, technology risk, cyber resilience, or related consulting who is looking to deepen their expertise, broaden client exposure, and grow their career in a high-demand capability area.

You will be part of a team delivering trusted advice across cyber risk, governance, resilience, and security improvement, with the opportunity to build your profile, expand your capability, and contribute to work that matters.

Ko Tō Rourou | Your key responsibilities

Deliver cyber risk and resilience engagements that help clients strengthen capability across a range of sectors and business environments.

Develop clear recommendations, roadmaps, and action plans that help clients improve cyber maturity, strengthen resilience, and support better decision-making.

Develop clear recommendations, roadmaps, and action plans that help clients improve cyber maturity, strengthen resilience, and support better decision-making.Assess cyber maturity, controls, and resilience using recognised frameworks such as NIST CSF, NZISM, ISO 27001 to identify gaps and inform practical improvement priorities.

Help clients identify, assess, and prioritise cyber risks, control weaknesses, resilience gaps, and improvement opportunities.

Support resilience initiatives such as incident response readiness, recovery planning, crisis preparedness, and operational resilience uplift.

Create high-quality client deliverables, including assessment reports, executive summaries, workshop materials, and remediation plans that support action.

Translate technical cyber issues into clear business risk insights for technical and non-technical stakeholders.

Ngā Pūkenga | Skills and attributes for success

3–5 years of practical experience in cyber security, technology risk, cyber resilience, IT audit, security advisory, or a related discipline.

Working knowledge of cyber frameworks and standards such as NIST CSF, NZISM, ISO 27001, CIS Controls, ISO 22301:2019 (business continuity) ISO, IEC 27035 (Information Security Incident Management or similar.

Experience in cyber assessments, risk reviews, control testing, resilience reviews, or security improvement programmes.

Strong written and verbal communication skills, including the ability to prepare clear reports, presentations, and client-ready deliverables.

Confidence engaging with stakeholders across technology, cyber security, risk, compliance, operations, and business teams.

A proactive, curious, and outcome-focused mindset, with a commitment to quality and continuous improvement.