Security Consultant at First Focus

Sydney, New South Wales, Australia -

Full Time

Start Date

Immediate

Expiry Date

25 May, 26

Salary

150000.0

Posted On

24 Feb, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Security Assessments, Pre-sales, Security Configuration, NIST CSF, ISO27001, ISO42001, ACSC Essential Eight, Risk Management, Presentation Skills, Technical Writing, AI Governance, Network Security, Application Security, Firewall Configuration, VPNs, Audit and Compliance

Industry

IT Services and IT Consulting

Description

You’ve spent years in the trenches, designing secure environments, guiding clients through risk, and implementing solutions that actually work. You know your frameworks, you speak fluent NIST and ISO, and you’re just as comfortable in a boardroom as you are in a firewall config. Now it’s time to join a team that backs your expertise, values your input, and gives you the space to shape security standards across a diverse client base. We’re First Focus, Australia’s #1 MSP (Cloud Tango says so, 8 years straight), and we’re not slowing down. With 330+ technical pros across Australia, New Zealand, and the Philippines, we’re scaling fast and doubling down on security. This isn’t a siloed role: it’s embedded in a growing, collaborative team that’s shaping how midmarket clients think about risk, resilience, and real-world protection. Based in Mascot, you’ll be at the heart of things, designing, building, and delivering security that’s not just smart, but scalable, practical, and built to last. 🔧 What You’ll Be Doing Running security assessments that don’t just tick boxes, but actually make clients safer Leading pre-sales chats with charm and precision, translating risk into solutions that sell themselves Rolling up your sleeves to build and configure security tech (because you don’t just talk the talk) Staying sharp on standards, frameworks, and threats (NIST CSF, ISO27001, ISO42001, ACSC Essential Eight, and whatever’s lurking in the shadows ) Raising the bar for SME and midmarket security - one smart solution, one confident client at a time Interpersonal, presentation, and writing skills so sharp you can explain risk to anyone with no jargon, no panic Real-world experience implementing NIST CSF, ISO 27001, or any other frameworks that actually work outside a textbook in the SME space Real-world experience around AI governance a bonus Deep security knowledge across networks, apps, OS, firewalls, VPNs, databases, email, and more, because threats don’t stick to one layer A pragmatic approach to risk. You don’t just identify problems, you help fix them Audit and compliance experience (extra kudos if you’ve been on the audit side of the table) At least one heavyweight cert: CISSP, SSCP, CCSP, CISM, CISA. Show us your stripes MSP or MSSP experience? That’s pure gold. If you’ve got it, flaunt it Up to $150k package + benefits for the right mix of skills and values Flexible working arrangements to support real work-life balance 10 paid study days a year, exam fees covered, and pay rises for certs FastTrack mentoring program for personal and professional growth MAD (Making A Difference) Council - equality, charity, and sustainability Tesla company car option (yes, really, but conditions apply) Regular social events and a team culture built on trust, curiosity, and support Free access to Uprise. 1:1 coaching with qualified psychologists or counsellors We welcome neurodiverse candidates and encourage disclosure so we can tailor the experience to showcase your strengths. Ask for our Neurodiversity Statement—we’d love to support you. If you’re ready to design, build, and defend with a team that values your expertise—apply now.

Responsibilities

The role involves running comprehensive security assessments to enhance client safety and leading pre-sales activities by translating complex risks into actionable, sellable solutions. Responsibilities also include hands-on building and configuration of security technology while staying current with evolving standards and threats.