Level

NCC Group

Security Consultant

AI in this role

Position Title: Senior Consultant   Location: Sydney   Role Purpose   Do you enjoy helping organisations understand, secure, and strengthen their cyber security postures against modern security threats? At NCC Group, you’ll help clients manage their cyber security risks across all environments and multiple business sectors.   Our Cyber Security Consultants play a key client-facing role, providing expert cybersecurity advisory services to multiple clients across industries. This position focuses on delivering high-impact security assessments, strategic recommendations, and implementation support while balancing technical depth with strong stakeholder engagement. The consultant acts as a trusted advisor, helping clients manage cyber risk, meet regulatory requirements, and align security initiatives with business objectives.  You’ll work at the intersection of cyber security, risk management, and operational resilience, supporting organisations as they respond to increasing regulatory scrutiny, geopolitical risk, and complex third-party ecosystems. This is a high-impact consulting work that blends strategic advisory, governance, and practical security improvement across supply chains.  

Key Responsibilities

Summary  


  • Lead and deliver cybersecurity consulting engagements for multiple clients.  

  • Conduct enterprise risk assessments, security maturity assessments, and gap analysis.  

  • Design and recommend security architectures, operating models, and control frameworks.  

  • Advise clients on regulatory and compliance requirements (e.g., ISO 27001, NIST, SOC 2, PCI-DSS, GDPR).  

  • Develop cybersecurity strategies, roadmaps, policies, and governance frameworks.  

  • Prepare and present executive-level reports, risk dashboards, and recommendations.  

  • Manage client relationships and act as a trusted security advisor.  

  • Contribute to proposals, statements of work, and business development activities.  

  • Liaise with the Resource Management and Pre-Sales team during the sales cycle to assist in quantifying, pricing, and assessing resources required for the project delivery.  

  • Assist with sales proposals, bids and tenders for delivery of consulting and implementation services.  

Skills, Knowledge & Expertise


What we are looking for in you  
  • Strong experience in cyber security risk management, maturity assessments, supply chain security, third-party risk, or operational risk consulting, ideally in complex enterprise environments  

  • Bachelor's degree in computer science, Information Security, or related discipline.  

  • 5+ years of experience in cybersecurity, with significant consulting or advisory experience.  

  • Strong knowledge of cybersecurity frameworks, risk management, and governance models.  

  • Experience working across multiple client environments and industries.  

  • Ability to balance hands-on technical work with strategic advisory responsibilities.  

  • Excellent written and verbal communication skills for technical and non-technical audiences.  

  • Practical understanding of controls and risk management frameworks, supplier assurance, and ecosystem-level security threats  

  • Experience conducting risk assessments, workshops, or assurance activities with third parties. 

  • Strong written and verbal communication skills, able to produce concise reports, and deliver clear recommendations. 


Nice-to-haves (not show-stoppers)  

  • Experience with regulatory and compliance drivers (e.g. DORA, NIS2, SOCI, critical infrastructure regulations)  

  • Understanding of software supply chain security (e.g. SBOMs, secure development, open-source risk)  

  • Exposure to geopolitical risk, sanctions, or operational resilience  

Certifications such as:  
o CISA, CISSP, CISM, CRISC  

o ISO 27001 / 27036 Lead Implementer or Auditor  
o Supply chain or risk-related certifications  


Consulting-Specific Competencies  
· Client relationship and stakeholder management  
· Engagement delivery and time management across multiple projects  
· Executive-level presentation and storytelling  

· Commercial awareness and contribution to sales efforts  
· Leadership, coaching, and team collaboration  

Ways of working  

  • Focusing on Clients and Customers.  

  • Working as One NCC. 

  • Always Learning. 

  • Being Inclusive and Respectful.  

  • Delivering Brilliantly.  



Our company  


At NCC Group, our mission is to create a more secure digital future. That mission underpins everything we do, from our work with our incredible clients to groundbreaking research shaping our industry. Our teams' partner with clients across a multitude of industries, delving into, securing new products, and emerging technologies, as well as solving complex security problems. As global leaders in cyber and escrow, NCC Group is a people-powered business seeking the next group of brilliant minds to join our ranks.  


Our colleagues are our greatest asset, and NCC Group is committed to providing an inclusive and supportive work environment that fosters creativity, collaboration, authenticity, and accountability. We want colleagues to put down roots at NCC Group, and we offer a comprehensive benefits package, as well as opportunities for learning and development and career growth. We believe our people are at their brilliant best when they feel bolstered in all aspects of their well-being, and we offer wellness programs and flexible working arrangements to provide that vital support.   


Come join us?  


 

How we rate this

Security Consultant at NCC Group rates 37 out of 100 for how much of the daily work is AI. That makes it Little AI (AI Level 1 of 4). The level is about AI in the job, not seniority.

Classification

Little AI. AI is not part of the work.

  1. ●●●● Builds AI80 to 100
  2. ●●●○ Works on AI60 to 79
  3. ●●○○ Uses AI40 to 59
  4. ●○○○ Little AI0 to 39

Levels come from how often the tools, models and workflows of the role are named in the posting itself. Open the description and count.

Get new AI jobs by email

One email a week with the new AI jobs, each rated for how much AI is in the work. No recruiter spam, unsubscribe in one click.

Free. One email a week. Unsubscribe in one click.

Similar roles

Security roles that involve little AI, at other companies.

What kind of AI work fits you?

Answer 12 practical questions in about three minutes. Get a simple profile, the work it points to, and live roles to explore next.

Find my next step

More jobs at NCC Group

Related searches

Same AI level

Apply on NCC Group