Manager - Tech Risk Assurance

BDO Australia; Sydney; On-site; AUD 95,000 - 130,000; Full time

Benefits offered by this job

Health & wellbeing benefits

Gym memberships

Travel perks

Professional development

Diversity & inclusion

Job summary

BDO Australia is seeking an Information Systems (IS) Auditor to join our Tech Risk Assurance team in Sydney. You will lead IT risk and assurance engagements, oversee planning and delivery, and mentor staff across engagement lifecycles.

Ideal candidates communicate complex risks to technical and executive stakeholders, with experience in SOC 2, COBIT, NIST, and ISO 27001. Professional certifications are highly desirable. A diverse, inclusive culture supports growth and client service excellence.

Qualifications

• Experience in IT risk, information security and technology assurance.
• Strong knowledge of SOC 2, COBIT, NIST, ISO 27001.
• Committed to delivering high-quality client outcomes.
• Professional certifications highly desirable.

Responsibilities

• Lead and deliver a diverse portfolio of technology risk and assurance engagements, IT General Controls (ITGC), and broader IT audit assignments.
• Plan, manage and execute audits of IT general controls, application controls and automated business processes.
• Contribute to continuous enhancement of IS Audit practice through training, methodologies and tools.
• Build and maintain strong client relationships by overseeing engagement planning, budgeting, and delivery while identifying advisory opportunities.
• Lead, mentor and develop teams by providing coaching and career development support.
• Identify and address engagement risks and escalate issues appropriately.
• Deliver practical recommendations to strengthen control environments and improve efficiency.
• Support business development through proposals and market-facing activities.

Skills

IT risk management

Information security

Audit standards & frameworks

Client relationship management

Education

CISA/CRISC/CISM/CISSP desirable

Job description

We’re BDO, a global professional services firm connected to local markets. Our people work together to provide specialist expertise, helping businesses achieve their goals.

We inspire others, to go further. We create together, to reach higher. We build trust, to lead purposefully.

Whether you’re building your future or starting your career with us, you won’t do it alone. From creating solutions for our clients to building careers for our people, we shape what matters , and that’s where you come in.

About the Role

Our national Audit Professional Practice Department (APPD) is looking for a detail-oriented Information Systems (IS) Auditor to join our Tech Risk Assurance (TRA) team. This role is open to candidates based in Sydney (preferred), Melbourne or Brisbane.

Working as part of a national team, this role will undertake a full range of IS audit tasks including audit planning, testing, reviewing and reporting. This will involve the supervision and development of staff members, as well as the overall management of monitoring the engagement work-in-progress. The role will also work in the provision of services to clients in the areas of other assurance engagements.

Key responsibilities:

• Lead and deliver a diverse portfolio of technology risk and assurance engagements, IT General Controls (ITGC), and broader IT audit assignments.
• Plan, manage and execute audits of IT general controls, application controls and automated business processes
• Contribute to the continuous enhancement of the IS Audit practice through the development of training programs, methodologies, tools and knowledge-sharing initiatives.
• Build and maintain strong client relationships by overseeing engagement planning, scoping, budgeting, resource management and delivery, while identifying opportunities to provide additional value and advisory support.
• Lead, mentor and develop high-performing teams by providing coaching, technical guidance and career development support to seniors, consultants and associates.
• Proactively identify, assess and address engagement risks, ensuring issues are escalated and managed effectively throughout the audit lifecycle.
• Deliver practical, commercially focused recommendations that help clients strengthen their control environments, manage risk and improve operational efficiency.
• Support business development initiatives by contributing to proposals, client presentations and market-facing activities that enhance the firm’s technology risk and assurance capabilities.

About You

Our ideal candidate can communicate complex technology risks, control deficiencies and improvement opportunities clearly and effectively to both technical teams and senior executive stakeholders.

You will also need:

• Demonstrated experience in IT risk, information security and technology assurance, gained within a professional services, consulting, internal audit or public practice environment.
• Strong knowledge of audit standards, regulatory requirements and industry frameworks, including SOC 2, GS 007, IIA Standards, ISACA guidance, Open Banking, COBIT, PCI DSS, ISO 27001, NIST and other recognised risk and control frameworks.
• A genuine commitment to delivering exceptional client service, building trusted relationships and consistently achieving high-quality outcomes.
• Professional certifications such as CISA, CRISC, CISM, CISSP are highly desirable. Candidates actively pursuing these qualifications will also be viewed favourably.
• Demonstrated understanding of enterprise technology environments, including the design, implementation and operation of key IT systems, infrastructure and business applications across complex organisations.
• Proven ability to lead engagements independently, manage competing priorities and take ownership of deliverables from planning through to completion.
• Strong project management and organisational skills, with the ability to manage multiple engagements while maintaining quality and meeting deadlines.
• Commercially minded with the ability to identify opportunities to enhance client outcomes and contribute to practice growth.

Why BDO?

Working for BDO you will be part of a growing and market leading professional services firm.

Our national and global footprint provides our people with opportunities to work on interesting client engagements, across diverse industry sectors and services.

Our open and collaborative culture ensures access to Partners and professional mentors, to guide and accelerate your professional career, across a wide array of career pathways.

• We provide our people with various health and wellbeing, social, financial, and professional development benefits to help realise what’s possible.
• Participate in fitness challenges or take advantage of exclusive discounts to corporate health insurance, gym memberships and wellness facilities via our BWell program. Access benefits such as travel perks, retail discounts, employee referral rewards, study, and professional development support.
• Our leave options cater to the unique needs of our people; and include enhanced family support, cultural and religious leave, and options to purchase additional leave. You can also give back and get involved in community initiatives via our BCaring program.
• With a strong focus on learning and growth, we provide on the job training and formal development programs to help you succeed in your role and develop your skills and experience.

Our culture is underpinned by our core values (One, Bold, Human, Heart and Strive).

We are proud to be recognised as an Inclusive Employer for 2025-2026 by Diversity Council of Australia and a 2024-2025 Employer of Choice for Gender Equality by the Workplace Gender Equality Agency (WGEA).

BDO is committed to inclusive and accessible recruitment practices. If you require any reasonable adjustments to support your application or interview process, we encourage you to contact our Talent Acquisition team at [e-mail]