Manager - Cybersecurity Advisory

Our Cyber practice helps organisations understand, manage and respond to evolving cyber and technology resilience risks. We work with boards, executives and operational teams to strengthen governance, meet regulatory obligations, improve decision-making and build long-term organisational resilience.

As a Manager in our Canberra Cyber practice, you will play a hands on role delivering high-quality advisory services to clients across government, critical infrastructure and regulated industries. You will work directly with senior leaders on some of the most complex cyber, technology, risk and resilience challenges facing Australian organisations today. You will contribute across a broad range of engagements that sit at the intersection of cyber security, technology, governance, risk, privacy, compliance and organisational resilience.

This role is ideal for professionals who enjoy solving complex problems, working closely with clients and translating technical, regulatory and business issues into practical, actionable outcomes. 

Duties and Responsibilities:
The role encompasses the following core responsibilities:

1. Work closely with clients to understand their operating environment, strategic objectives and key risks, providing practical advice that strengthens organisational resilience and supports informed decision-making.
2. Support and deliver advisory engagements across cyber security, technology risk, privacy, governance, compliance, resilience and assurance.
3. Assist organisations in understanding and responding to evolving regulatory obligations, industry standards and government expectations.
4. Analyse artefacts including policies, procedures, risk registers, technical documentation, governance frameworks and operational documentation, translating findings into clear, actionable recommendations.
5. Develop high-quality reports, presentations, business cases and executive briefings tailored to both technical and non-technical audiences.
6. Support cyber security and resilience strategies, operating models, roadmaps and transformation initiatives.
7. Conduct assessments and reviews aligned to recognised frameworks and standards such as ISO 27001, NIST CSF, Essential Eight, AESCSF, IS18, PSPF, ISM and CPS 234.
8. Work collaboratively with multidisciplinary teams across KordaMentha to deliver integrated outcomes for clients.
9. Build trusted relationships with client stakeholders and contribute to a positive and collaborative team culture.
10. Contribute to business development activities, including proposals, thought leadership, market initiatives and client pursuits.

The successful candidate will bring a strong mix of technical capability, advisory experience and professional judgement, including:

• 4 - 5years’ experience in consulting, risk, cyber security, privacy, technology, audit, governance, compliance, legal or advisory roles.
• Experience supporting or delivering projects across cyber security, technology risk, governance, compliance, privacy, resilience or assurance.
• Sound understanding of recognised cyber security frameworks and standards, such as ISO 27001, NIST CSF, Essential Eight, ISM, PSPF, AESCSF and CPS 234.
• Ability to assess cyber and technology risks and translate findings into practical, defensible recommendations for technical, executive and regulatory audiences.
• Strong written and verbal communication skills, including experience preparing high quality reports, risk assessments, presentations and executive briefings.
• Confident stakeholder engagement skills, with the ability to manage expectations across technical and non technical audiences.
• Strong organisational skills, attention to detail and ability to manage competing priorities while delivering high-quality work to deadlines.
• Collaborative, client focused and outcomes driven approach, with the ability to work effectively in multidisciplinary teams.

Eligibility & Working Conditions 

• Ability to obtain a security clearance is preferred (and Australian citizenship/clearance requirements may apply depending on client work).  

• Occasional interstate travel may be required, with potential for full time client site attendance relevant to engagement needs.