S

Scyne Advisory

Public-sector advisory and consulting services

Manager – Digital Forensics and Incident Response

Full-TimePosted on 10/22/2026
No salary listed
Senior
Sydney NSW, Australia
HybridOccasional after-hours attendance at the office or client sites may be required; flexible work arrangements are available.
CybersecuritySecurity Operations & Incident Response
Canada Citizenship Required

About the job

Requirements
  • At least 5 years of industry experience working in incident response, digital forensics, or security operations.
  • Hands-on technical skills with networks, hyperscale cloud platforms (Azure, AWS, and GCP), common SaaS applications, end-user computing, and data management tools.
  • Knowledge of digital forensics and data analysis practices, with hands-on capability using supporting tools.
  • Knowledge of relevant industry frameworks, including MITRE ATT&CK and NIST SP 800-61.
  • Basic project management skills and the ability to lead a team in delivering a small project.
  • Recognised industry qualifications or certifications such as GCIH, GCFA, Security+, CIH, or other relevant security operations certifications.
  • Ability to participate in a 24/7 on-call roster for after-hours engagements and client response activities, including occasional after-hours attendance at the office or client site.
  • Australian citizenship and willingness to undertake Baseline clearance, or preferably NV1 clearance, to support work with Defence.
Responsibilities
  • Use technical digital forensics and incident response skills to help clients respond to cyber incidents, providing hands-on support and expert advice.
  • Follow recognised digital forensics and incident response frameworks, methodologies, and practices, including applicable NIST frameworks, ISO/IEC 27035, and MITRE ATT&CK.
  • Work in highly sensitive and regulated environments across government and public-purpose sectors, following relevant policies and procedures.
  • Support the growth and professional development of junior team members as they develop their digital forensics and incident response skills and experience.
  • Collaborate with peers and teams across Scyne and alliance partners to engage the capabilities needed to support clients.
  • Support the development of new capabilities, products, and services based on market demand.

About the company

Scyne Advisory provides advisory and consulting services to Australian government agencies and public purpose organizations. It operates in three divisions—Transformation (digital modernization and change management), Risk, Programs, and Cyber (risk, governance, cybersecurity, and program management), and Commercial, Financial, and Infrastructure (economic and financial advisory for major investments)—on a fee-for-service basis for public sector projects. The firm positions itself as conflict-free and independent after being spun off from PwC with Allegro Funds’ investment, governed by ASX-style principles and public-sector codes, with an independent board focused on probity and ethics. Its goal is to help the public sector modernize, manage risk, and make informed investment decisions through trusted, non-conflicted advisory services.

Company Size

501-1,000

Company Stage

N/A

Total Funding

N/A

Headquarters

Canberra, Australia

Founded

2023

Get referred to Scyne Advisory

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • Allan Forbes joined on 24 August 2026, expanding enterprise-value and productivity offerings.
  • Michelle Perugini starts 1 September 2026, strengthening AI-led transformation sales.
  • Defense, water, and pricing work kept Scyne active, including a $3.7 million Defence contract.

What critics are saying

  • Scyne plans 100 layoffs after senior departures, signaling margin pressure and weaker demand.
  • FY26 federal contract value fell 59%, from $21 million and 43 awards.
  • If Commonwealth panels bypass Scyne, Allegro's 2023 spin-off loses its core franchise.

What makes Scyne Advisory unique

  • Scyne Advisory still owns PwC's former public-sector relationships, with 608 federal contracts by September 2026.
  • John Ball and John Mullen anchor a conflict-free governance model built in 2023.
  • New Adelaide, Brisbane, and Sydney offices complete separation from PwC by October 2026.

Help us improve and share your feedback! Did you find this helpful?

Benefits

  • Parental Leave
  • Flexible Work Hours
  • Remote Work Options
  • Paid Vacation
  • Phone/Internet Stipend
  • Stock Options

Growth & Insights and Company News

6 month growth

0%

1 year growth

0%

2 year growth

0%
TechDay
Oct 12th, 2026
Scyne tour pushes verified cyber checks for suppliers.

Scyne tour pushes verified cyber checks for suppliers. Tue, 13th Oct 2026 (Today) Scyne has completed a national Government Sector Cyber Resilience Summit tour with CyberCert, ending in Perth after events in Sydney, Melbourne, Brisbane and Adelaide. The meetings brought together cybersecurity leaders from federal, state and local government, along with industry bodies and small business representatives, to discuss risks in public sector supply chains. Central to the discussions was the exposure created when government agencies depend on thousands of small and medium-sized businesses to deliver public services. The events focused on the risk that a cyber breach at a supplier can disrupt services and provide a route into government systems. Speakers also examined the use of security questionnaires in procurement and vendor reviews. Discussions favoured replacing self-declared assessments with independently verified assurance through SMB1001 certification. Scyne said the sessions explored practical security steps that smaller suppliers can adopt without significant friction. The aim was to give buyers verified risk information that can feed directly into procurement decisions. Supply chain focus The public sector has become increasingly reliant on outside providers for digital services, operational support and specialist expertise. That model can widen the attack surface, particularly when smaller suppliers have fewer resources to manage cyber threats. The summit centred on third-party risk rather than only agencies' internal defences. Organisers said attackers often target weaker suppliers to gain access to larger organisations and critical systems. Independent verification was a central theme across the tour. Rather than relying on static declarations from vendors, discussions highlighted certification as a way to give government buyers clearer evidence of a supplier's security posture. Industry backing Fortinet, LastPass, MyCISO, Cyber Wardens and Coalition Insurance contributed to the stage programme. Their involvement pointed to a broader effort by security vendors, advisers and insurers to shape how government and smaller businesses address supply chain exposure. The inclusion of small business advocates also highlighted a practical issue in cyber policy: governments may seek stronger safeguards from suppliers, but those requirements must be workable for smaller firms without large compliance teams. That tension between assurance and administrative burden has become more prominent as cyber requirements spread through procurement frameworks. For many agencies, the challenge is to gain better visibility over supplier risk without creating lengthy processes that exclude smaller providers from public contracts. Scyne said the events were designed to address that gap by promoting a model that combines verification with lower-friction controls for suppliers. It added that public sector organisations are seeking greater visibility over both their internal security posture and the position of third parties in their supply chains. Government exposure The issue has implications beyond technology procurement. A successful breach affecting a contractor can interrupt services used by communities, delay public administration and increase pressure on agencies responsible for continuity of essential operations. That makes third-party cyber risk a governance issue as well as a technical one. It also places greater emphasis on how agencies assess vendors before contracts are signed and monitor suppliers once services are in operation. By taking the summit to five cities, Scyne and CyberCert reached a broad cross-section of Australian public sector stakeholders. The route through Sydney, Melbourne, Brisbane, Adelaide and Perth suggests an effort to engage agencies and supplier networks across several major government and business centres. The discussions also indicated a shift from awareness to evidence. Rather than asking suppliers to describe their controls in questionnaires alone, the model promoted through the tour was based on verified information that procurement teams can use in contract and risk decisions. With contributions from Fortinet, LastPass, MyCISO, Cyber Wardens and Coalition Insurance, the summit underscored that securing the public sector supply chain requires collective capability-building across agencies and industry.

Consultancy.com.au
Aug 24th, 2026
Allan Forbes joins Scyne Advisory as Managing Director in Sydney.

Allan Forbes joins Scyne Advisory as Managing Director in Sydney. 24 August 2026 Consultancy.com.au After years working as an independent consultant, Allan Forbes has returned to firm world after joining Scyne Advisory as Managing Director. Based in Sydney, Forbes brings close to three decades of experience to the public sector consultancy, including a career in leadership and advisory roles at GrainCorp, McKinsey & Company, Laing O'Rourke, Partners in Performance (now part of Accenture), Insurance Australia Group and KPMG. His background spans extensive expertise in performance improvement strategies, organisation design and transformation, gained across a range of sectors including government, energy, health, infrastructure, construction, mining, heavy industry, agriculture, financial services, telecommunications and technology. At Scyne Advisory, Forbes will lead the Financial Performance Optimisation offering (FPO) within the firm's Commercial, Financial & Infrastructure practice. This offering helps organisations to enhance their financial outcomes (including revenue, cost and balance sheet optimisation), through bottom-line productivity and performance improvement. "I'm looking forward to working with Scyne Advisory's clients on Enterprise Value Optimisation," he said. "The organisations I speak with rarely suffer from a shortage of good ideas. The harder problem is deciding where scarce resources - capital, people, management attention, technology and execution capacity - should go, and then actually delivering the value from those choices." "That challenge feels particularly relevant now. Productivity remains difficult. Capital has to work harder. Major investment programs are competing for constrained resources. And AI is creating enormous opportunity while raising a very practical question: where will it genuinely improve economics, productivity or decision quality?" "For me, Enterprise Value Optimisation is about connecting those choices across commercial and financial performance, capital, productivity and risk with the operational, technology and organisational changes required to deliver measurable outcomes." Established in 2023 as a breakaway from PwC, Scyne Advisory provides professional services across government sectors. "One of the things that attracted me to Scyne Advisory is the opportunity to work with talented people on difficult problems that matter - combining commercial rigour with the firm's broader commitment to people with purpose," Forbes noted.

Victorian Water Register
Aug 13th, 2026
Victorian water intermediaries audit reports released for 2023-24 and 2024-25.

Victorian water intermediaries audit reports released for 2023-24 and 2024-25. - 13 August 2026 The Department and Energy, Environment and Climate Action (DEECA) has released its Audit of Water Intermediaries report for 2023-24 and 2024-25. Intermediaries have also received their individual audit reports. The Victorian Government is committed to transparency for water market participants. Actively overseeing water market operations ensures their ongoing effectiveness. The release of this audit report underscores that commitment. This audit provides oversight of compliance with government rules for using the Victorian Water Register's online Broker Portal and API. The audit also checks intermediaries' compliance of their responsibilities to their clients. DEECA engaged independent auditor Scyne Advisory to undertake the combined 2023-24 and 2024-25 audit. The results provide DEECA and Register users with assurance that, across the board, the majority of intermediaries are acting in compliance with the terms of the Broker Portal Agreement and related instruments. Where non-compliance was detected, no instance of inappropriate access to customer information or improper trade activity was identified. The audit resulted in the following outcomes: * Non-compliance findings requiring corrective action were identified for four water market intermediary firms. * Eighteen water market intermediary firms demonstrated compliance with audit requirements, with no further action required. * Two water market intermediary firms ceased using the Broker Portal during the audit period. The joint 2023-24 and 2024-25 audit summary report is available below and presents the key findings of the audit.

Reuters
Nov 6th, 2023
Allegro Funds gets final regulatory approval to take over PwC Australia spinoff

Private equity group Allegro Funds said on Monday it had received the final approval for its takeover of Scyne Advisory, PwC Australia's former government consulting wing, clearing the way for the deal to close this week.