Manager, Cybersecurity & Privacy

At Protiviti, we believe in empowering our employees.

We value diversity and inclusion and celebrate the unique perspectives each employee brings.

Our nurturing culture fosters teamwork and growth opportunities that allow individuals to thrive both personally and professionally.

Protiviti is a global business consulting firm composed of experts specialising in advisory, risk and assurance services.

We help clients solve problems in finance, operations, technology, governance, risk, and compliance.

Our highly trained, results-oriented professionals serve clients in the Americas, Asia-Pacific, Europe and the Middle East and provide a unique perspective on a wide range of critical business issues.

Our culture prides itself on nurturing talent through mentorship and providing opportunities for continuous learning.

With us:

• You'll tackle diverse challenges that enrich your skills.

• You'll collaborate with thought leaders who are eager to share their knowledge.

• You'll enjoy perks that support work-life balance and personal development.

What You’ll Do: As a key member of the Cybersecurity team, Managers deliver technically rigorous assessments, design secure architectures, lead remediation efforts, and drive the implementation of enterprise-grade controls.

You’ll work with diverse Australian and international organisations across cloud, on-premises, and hybrid environments.

This role combines technical depth and strategic oversight, acting as a trusted advisor while leading client engagements end-to-end.

• Cybersecurity Engineering & Architecture: Lead advanced assessments across cloud, network, application, and endpoint layers. Evaluate enterprise security using frameworks like NIST CSF and Zero Trust, and design modern security controls while optimizing client security tools.

• Technical Risk Assessment & Threat Mitigation: Conduct threat modeling with methodologies such as STRIDE and MITRE ATT&CK. Perform gap assessments, identify vulnerabilities, and recommend remediation strategies to enhance incident detection and response.

• Cloud & Modern Security Technologies: Develop secure cloud architectures for AWS, Azure, and GCP, focusing on IAM and encryption. Review configurations and lead remediation programs for cloud-native applications.

• Digital Identity & Access Management: Design and assess IAM strategies, including SSO and MFA. Evaluate identity governance and provide recommendations to strengthen resilience.

• Data Protection & Privacy Engineering: Implement data classification and DLP controls across environments. Conduct privacy risk assessments aligned with GDPR and ISO 27701.

• Client Engagement & Delivery Leadership: Lead technical delivery teams, manage planning and execution for complex engagements, and mentor consultants. Build trusted client relationships to support long-term cybersecurity maturity.

• Consultative Expertise: Conduct cybersecurity evaluations to identify risks and implement stringent protocols. Advise clients on data protection methods and collaborate with IT departments for seamless integration.

• Engagement Management: Oversee client engagements, including risk assessments and reporting. Support Senior Leaders during planning and execution phases to ensure client needs are met.