Cyber GRC Solutions Consultant

About the role

You will lead cyber security and risk engagements for critical infrastructure operators, delivered through the Overcyte platform. The role covers the full customer lifecycle. You will help the sales team show prospective customers what the platform can do, run the assessments and risk work that form the core of each engagement, and stay involved after delivery so customers keep using the platform for their ongoing assessment cycles and board reporting. What you learn in the field goes back to the product team so the next customer has a better experience.

Key responsibilities

Pre-sales

• Run demonstrations and proof-of-value work with the sales team, using your assessment experience to show prospective customers how the platform supports their regulatory and governance obligations.

• Scope engagements and help shape proposals, including fixed-scope entry offers that lead into an ongoing platform subscription.

Engagement delivery

• Lead cyber security and risk maturity assessments through workshops, interviews and evidence reviews, then turn findings into reports, executive summaries and prioritised roadmaps that boards and operational teams can act on.

• Facilitate risk identification and analysis sessions, build cyber risk registers, and help customers connect cyber risk to their enterprise risk frameworks, risk appetite and board reporting.

• Present findings and progress to executives, boards and risk committees.

• Configure the platform for each customer, including their frameworks, assessments, risks, controls and remediation actions, so the engagement results become the starting point for their ongoing programme.

Post-sales

• Set up each customer's reporting cycle so repeat assessments, remediation tracking and board papers run from the platform year on year.

• Support the customer success team with onboarding and adoption, identify accounts where use is falling, and act early so customers continue to see a return on their investment.

• Provide advisory support to existing customers, including vCISO-style guidance where it suits their needs.

Across the business

• Write assessment content, templates, framework mappings and guidance materials that ship to every customer, and contribute to the methodologies used across the team.

• Bring structured feedback from customers to the product team and help shape features that improve delivery and reporting.

• Track regulatory and standards developments, including SOCI in Australia and evolving NZ critical infrastructure requirements.

• Contribute to webinars, articles and customer education.

What you will bring

• Five or more years in cyber security, governance, risk management, compliance, audit or consulting.

• A track record of leading assessments, audits or maturity evaluations and writing the reports and roadmaps that follow.

• A working understanding of cyber security governance and risk management principles.

• Confidence facilitating workshops and presenting to technical, operational and executive audiences.

• Comfort working alongside sales, and an interest in long-term customer relationships beyond the end of a single engagement.

• The organisation to manage several engagements at once and the self-direction to work well remotely.

It would help if you have

• Experience with critical infrastructure or essential services.

• Familiarity with one or more of AESCSF, NIST CSF, ISO 27001, IEC 62443 or CIS Controls.

• Hands-on use of GRC platforms.

• Prior work in pre-sales, customer success or account management desirable.

• An interest in how software products are designed and improved.

About us

Overcyte is a growing company with a small, senior team. Electricity distributors, water utilities, councils and other critical infrastructure operators across New Zealand, Australia use Overcyte to assess their cyber security maturity, manage risk and report to their boards.

This is a remote role with the team distributed around New Zealand.