Cyber Resilience Manager - Cybersecurity

About the Role

Join EY’s expanding cyber team in Auckland, New Zealand, where you will help organisations confront complex cybersecurity threats and strengthen their operational resilience. As a Cyber Resilience Manager, you will guide clients through identifying, assessing, and managing cyber risks while delivering practical solutions to enhance cyber maturity and decision-making.

This position suits professionals with over five years of experience in cybersecurity, technology risk, cyber resilience, or related consulting disciplines who seek to deepen their expertise and expand client engagement in a high-demand area.

Key Responsibilities

• Lead cyber risk assessments, maturity evaluations, and threat modelling initiatives.
• Oversee project execution including budget management and maintaining client relationships.
• Provide mentorship to junior staff and support business development efforts.
• Conduct cyber risk and resilience engagements across diverse sectors to bolster client capabilities.
• Develop actionable recommendations, strategic roadmaps, and plans to advance cyber maturity and resilience.
• Use established frameworks such as NIST CSF, NZISM, and ISO 27001 for maturity and control assessments to pinpoint gaps and prioritize improvements.
• Assist clients in identifying and prioritizing cyber risks, control deficiencies, resilience shortfalls, and areas for enhancement.
• Support initiatives around incident response readiness, recovery strategies, crisis preparedness, and operational resilience enhancements.
• Produce high-quality client documents including assessment reports, executive summaries, workshops materials, and remediation plans.
• Translate complex technical cyber issues into clear, actionable business risk insights tailored to varied stakeholders.

Required Skills and Experience

• Minimum of five years’ practical experience in cybersecurity, technology risk, cyber resilience, IT audit, or security consulting.
• Familiarity with cyber frameworks such as NIST CSF, NZISM, ISO 27001, CIS Controls, ISO 22301 (Business Continuity), and IEC 27035 (Incident Management) or equivalents.
• Experience conducting cyber assessments, risk reviews, control testing, and resilience improvement programs.
• Excellent communication skills, capable of producing comprehensive reports, presentations, and client-ready deliverables.
• Comfortable engaging with diverse stakeholders including technical, cyber, risk, compliance, operations, and business teams.
• A proactive, inquisitive, and outcome-driven approach with strong commitment to quality and continuous improvement.
• Ability to work effectively in a team-oriented, project-based environment while also performing independently.
• Proficiency in Microsoft Word, Excel, and PowerPoint.
• Relevant certifications such as CISA, CISM, CRISC, CISSP, ISO 27001, or CompTIA Security+ are advantageous but not required.

What EY Provides

• Career development opportunities with access to advanced skill-building and global experiences.
• Flexible work policies that support balancing work and personal commitments in a culture built on trust and autonomy.
• A comprehensive benefits package, including wellness incentives, additional flexible leave options, and inclusive family-friendly policies such as up to 26 weeks of gender-neutral paid parental leave.
• A diverse and inclusive work environment that embraces applicants of all backgrounds and provides equitable recruitment processes, with confidential support available throughout.

Additional Information

This role is based in Auckland and follows a hybrid work model. Applicants will be required to complete employment screening by EY or their external providers. Confidential support for candidates during the recruitment process is offered.