Manager, Cybersecurity & Privacy

About the role

Protiviti is seeking a Manager for its Cybersecurity & Privacy practice in Sydney. You will lead end‑to‑end client engagements, delivering assessments, secure architectures and remediation across cloud, on‑premises and hybrid environments.

Key responsibilities

• Lead advanced security assessments across cloud, network, application and endpoint layers using frameworks such as NIST CSF and Zero Trust.
• Conduct threat modeling (STRIDE, MITRE ATT&CK), gap analyses and drive remediation programs.
• Design secure cloud architectures for AWS, Azure and GCP, focusing on IAM, encryption and configuration hardening.
• Develop and assess digital identity solutions, including SSO, MFA and identity governance.
• Implement data classification, DLP and privacy controls aligned with GDPR and ISO 27701.
• Manage technical delivery teams, mentor consultants and build trusted client relationships.

Required profile

• Minimum 5+ years of experience in cybersecurity engineering, architecture or consulting.
• Strong hands‑on expertise in cloud security, network security, IAM and threat modeling.
• Deep knowledge of security frameworks and standards (ISO 27001, NIST CSF, CIS Controls, Zero Trust, Essential 8).
• Relevant certifications preferred (CISA, CISSP, CISM, CCSP, CCSK, AWS/Azure/GCP security).

Required skills

• AWS, Azure, GCP security services
• Identity and Access Management (IAM, SSO, MFA)
• Threat modeling (STRIDE, MITRE ATT&CK)
• Vulnerability management and incident response
• SIEM and detection engineering
• Data protection technologies (DLP, data classification)
• Frameworks: NIST CSF, Zero Trust, ISO 27001, ISO 27701, GDPR

What we offer

• Incentive compensation plan with bonuses
• Study Assistance Program and coverage for professional memberships
• Wellness Academy, EAP, health checks and discounted gym memberships
• Global Mobility Program for international career growth
• Employee networks supporting diversity, equity and inclusion