Skip to content
Cybersecurity & Trust Advisory · NZ · AU · Fiji · UK · India

Senior-led cyber, risk and trust advisory with the platforms to scale it.

CybrGen is a senior-led cybersecurity and trust consultancy. We test your systems, advise on risk, prepare you for certification, and run security programs across New Zealand, Australia, Fiji, the UK and India. Accelerated by platforms we build ourselves.

Book a strategy call →See how we work
Security · Risk · Trust
Operationalised, end to end.
TRUSTCORETESTfind the gapsADVISEfix what mattersCERTIFYprove itRUNkeep it runningA continuous trust operating model
Big 4 backgrounds·PwC · Deloitte · KPMG·75+ years combined leadership experience
Transport & InfrastructureSaaS & FintechPublic SectorEnergy & Utilities
What we do

Six practices. One senior team.

Full-scale consulting with the breadth of a large firm. Delivered by the practitioners who scope it.

01

Offensive Security & Testing

Find what attackers would, before they do. Web, infrastructure and mobile penetration testing, red team and architecture review.

VAPTWAPTMAPTRed team
DisclosureX · CEH
02

GRC & Certification Readiness

SOC 2, ISO 27001 and ISO 42001 readiness and certification support. We prepare you to pass. The opinion stays with your auditor.

SOC 2 prepISO 27001PolicyFrameworks
Powered by MyTrustForge
03

IT Risk & Controls Advisory

Technology risk assessments, ITGC reviews, internal controls design and uplift, and IS/IT roadmap reviews.

Tech riskITGC reviewControls upliftRoadmaps
CRISC
04

AI Governance & Data Privacy

EU AI Act, ISO 42001 and NIST AI RMF programs, ISO 42001 internal audit, and privacy under the NZ Privacy Act and GDPR.

ISO 42001EU AI ActNIST AI RMFPrivacy
ISO 42001 LA · CDPSE
05

Fractional Leadership

Senior security and compliance leadership on retainer. For organisations that need the seniority without the headcount.

vCISOvCompliancevDPOBoard advisory
Retained · MBA
06

Third-Party Risk (TPRM)

Vendor risk programs, security questionnaires and continuous monitoring. Run as a managed service or stood up in-house.

OnboardingMonitoringV-ROCQuestionnaires
Delivered with Vendor360
Why CybrGen

The depth of a large firm, delivered by senior practitioners. Accelerated by platforms a firm our size shouldn’t have.

Senior-led, end to end

The person who scopes the work delivers it. No junior hand-offs, no diluted delivery.

Platform-accelerated

Our own tooling does the heavy lifting on evidence, vendor risk and control mapping. Engagements move faster and cost less.

Programs that run

We build trust operations that keep working after we leave. Not reports that sit in a drawer.

Our IP

We don’t just advise. We build the tooling.

Trust operations

MyTrustForge

Continuous compliance, evidence and control posture in one operating layer.

Visit mytrustforge.com →
Vendor governance

Vendor360

Third-party risk assessment and continuous monitoring at scale.

Visit vendor360.online →
Assurance workflow

IA Foundry

Structured internal assurance and audit-program tooling.

Visit theiafoundry.com →
Strategic execution

ScaleGrid

Operating-model and founder-led growth execution.

Visit scalegrid.app →
Selected engagements

Outcomes, not deliverables.

Engagements presented under confidentiality. Details available on request.

Transport · TPRM

Governance across 50+ vendors

Designed and stood up a third-party risk program. Questionnaires, document review and ongoing risk reporting.

SaaS · GRC

40% less audit-prep effort

SOC 2 readiness including control design, evidence structure and certification preparation.

Enterprise · Testing

Critical risks closed pre-cert

Application and infrastructure penetration testing ahead of ISO and SOC certification cycles.

Build a security program that actually runs.

One conversation with a senior practitioner. A clear view of where you are, what to fix first, and what good looks like.

Book a strategy call →Send an enquiry

No obligation · Practical roadmap · Built around your current maturity