Cybersecurity & Trust Advisory · NZ · Australia · Fiji · UK · India

Senior-led cyber, risk and trust advisory with the platforms to scale it.

Senior-led cybersecurity and trust advisory. Testing, GRC, AI governance, fractional leadership and third-party risk across NZ, Australia, Fiji, UK and India. Accelerated by platforms we build.

Book a strategy call →See how we work

Security · Risk · Trust

Operationalised, end to end.

Big 4 backgrounds·PwC · Deloitte · KPMG·75+ years combined leadership experience

Transport & InfrastructureSaaS & FintechPublic SectorEnergy & Utilities

What we do

Six practices. One senior team.

Full-scale consulting with the breadth of a large firm. Delivered by the practitioners who scope it.

Offensive Security and Testing

Find what attackers would, before they do. Web, infrastructure and mobile penetration testing, red team and architecture review.

VAPTWAPTMAPTRed team

DisclosureX · CEH

GRC and Certification Readiness

SOC 2, ISO 27001 and ISO 42001 readiness and certification support. We prepare you to pass. The opinion stays with your auditor.

SOC 2 prepISO 27001PolicyFrameworks

IT Risk and Controls Advisory

Technology risk assessments, ITGC reviews, internal controls design and uplift, and IS/IT roadmap reviews.

Tech riskITGC reviewControls upliftRoadmaps

CRISC

AI Governance and Data Privacy

EU AI Act, ISO 42001 and NIST AI RMF programs, ISO 42001 internal audit, and privacy under the NZ Privacy Act and GDPR.

ISO 42001EU AI ActNIST AI RMFPrivacy

ISO 42001 LA · CDPSE

Fractional Leadership

Senior security and compliance leadership on retainer. For organisations that need the seniority without the headcount.

vCISOvCompliancevDPOBoard advisory

Retained · MBA

Third-Party Risk (TPRM)

Vendor risk programs, security questionnaires and continuous monitoring. Run as a managed service or stood up in-house.

OnboardingMonitoringV-ROCQuestionnaires

Delivered with Vendor360

Why CybrGen

The depth of a large firm, delivered by senior practitioners. Accelerated by platforms a firm our size shouldn’t have.

Senior-led, end to end

The person who scopes the work delivers it. No junior hand-offs, no diluted delivery.

Platform-accelerated

Our own tooling does the heavy lifting on evidence, vendor risk and control mapping. Engagements move faster and cost less.

Programs that run

We build trust operations that keep working after we leave. Not reports that sit in a drawer.

Our IP

We don’t just advise. We build the tooling.

Trust operations platform

MyTrustForge

Continuous compliance, evidence and control posture in one operating layer.

Four pillars under one cockpit: Cyber Trust, AI Trust, Vendor Trust, Trust Response.

Visit mytrustforge.com →

Vendor Trust pillar of MyTrustForge

Vendor360

Also available as a standalone entry point for vendor-risk-first teams.

Visit vendor360.online →

Assurance workflow

IA Foundry

Structured internal assurance and audit-program tooling.

Visit theiafoundry.com →

Strategic execution

ScaleGrid

Operating-model and founder-led growth execution.

Visit scalegrid.app →

Selected engagements

Outcomes, not deliverables.

Engagements presented under confidentiality. Details available on request.

Transport · TPRM

Governance across 50+ vendors

Designed and stood up a third-party risk program. Questionnaires, document review and ongoing risk reporting.

SaaS · GRC

40% less audit-prep effort

SOC 2 readiness including control design, evidence structure and certification preparation.

Enterprise · Testing

Critical risks closed pre-cert

Application and infrastructure penetration testing ahead of ISO and SOC certification cycles.

Build a security program that actually runs.

One conversation with a senior practitioner. A clear view of where you are, what to fix first, and what good looks like.

Book a strategy call →Send an enquiry

No obligation · Practical roadmap · Built around your current maturity