Senior Consultant / Assistant Manager - Risk Advisory Services (Cyber GRC)

BDO Administration Pty Ltd; Melbourne; On-site; AUD 140,000 - 210,000; Full time

Benefits offered by this job

Health and wellbeing benefits

BWell program

Travel perks

Employee referral rewards

Study and professional development

Enhanced family leave

Job summary

BDO is seeking an experienced IT Risk Advisory leader in Melbourne to drive risk governance, privacy and IT risk programs for diverse clients.

You will lead engagements, manage client relationships, and mentor a team while delivering high-quality assurance and advisory services in line with frameworks like ISO27001 and NIST CSF.

Qualifications

• Experience in cybersecurity governance, risk and compliance.
• Exposure to privacy assessments and regulatory requirements (GDPR, APPs).
• Experience in business continuity and resilience frameworks.

Responsibilities

• Support Partners in developing IT Risk Advisory & Consulting business.
• Manage a portfolio of clients across industries with IT risk focus.
• Supervise fieldwork and prepare high-quality reports/deliverables.
• Apply firm delivery standards to provide insightful client advice.

Skills

IT risk management

Cyber governance

Risk assessment

Stakeholder management

Leadership

Education

Information systems / accounting / business degree

CISA / CISSP / ISO27001 Lead Auditor/Implementor

Tools

NIST CSF

ISO 27001

Job description

We're BDO, a global professional services firm connected to local markets. Our people work together to provide specialist expertise, helping businesses achieve their goals. We inspire others, to go further. We create together, to reach higher. We build trust, to lead purposefully. Whether you're building your future or starting your career with us, you won't do it alone. From creating solutions for our clients to building careers for our people, we shape what matters, and that's where you come in.

About the Role

BDO's Risk Advisory team provide a full range of risk solutions to help organisations navigate a diverse range of challenges, changes, and opportunities. The risk assurance and advisory solutions we can provide include risk management, risk mitigation, risk strategies and crisis management. Our Cyber GRC function helps organisations strengthen governance, manage cyber and privacy risks, maintain resilient operations and demonstrate compliance with regulatory and industry requirements. We provide advisory and assurance services across cyber governance, risk and control frameworks, privacy and data protection, business continuity and operational resilience, third-party risk, maturity assessments and control effectiveness. Our experience spans frameworks and requirements including ISO 27001, ISO 22301, NIST CSF, CPS 230, CPS 234, SOCI and SOC reporting.

Key Responsibilities

As part of the RAS Leadership Team, you are responsible for supporting the Partners in the development of IT Risk Advisory & Consulting business, execution of RAS projects, handling client matters, building team performance at both an individual and team level and ensure operational excellence in engagement delivery. Additionally, you will:

• Assist in building and mentoring an IT Risk Advisory & Consulting team of highly skilled internal
• Manage a varied portfolio of clients across a range of industry sectors, with a focus on IT risk
• Supervise and undertake fieldwork and prepare written reports or deliverables of a high quality
• Understand and apply the firm's professional delivery standards to deliver high-quality, insightful advice and exceptional client service.
• Assist in driving the development of new business solutions / service offerings.
• Assist in driving the continuous improvement of current practice processes, tools and
• Coach and mentor junior members of the team.
• Drive growth initiatives and business development of the practice while working with Partners / Senior Management and other service lines across the broader BDO team.

Qualifications and Experience required

• High level of experience in a similar role in practice or industry
• Information systems, accounting or business related tertiary qualification
• Certifications or qualifications relevant to the role (e.g., CISA, CISSP, ISO27001 Lead Auditor/Implementor)
• Experience in Cyber Security Governance Risk and Compliance including framework reviews
• Experiencing in assessing business continuity implementation and supporting in the implementation of a business continuity framework.
• Experience in performing Privacy assessments, leveraging the Australian Privacy Principles or Global Privacy regulations, including the GDPR.
• Experience in IT risk management including frameworks, risk processes and methodologies.
• Strong working knowledge of key business risks across various industry sectors.
• Experience in proposals, project management, risk and control identification and reporting.
• Experience in presenting to Senior Management, Boards and ARCs and facilitation of workshops.
• Exposure to latest better practices/methodologies/frameworks in regard to IT risk management

Why BDO?

Working for BDO you will be part of a growing and market leading professional services firm. Our national and global footprint provides our people with opportunities to work on interesting client engagements, across diverse industry sectors and services. Our open and collaborative culture ensures access to Partners and professional mentors, to guide and accelerate your professional career, across a wide array of career pathways.

We provide our people with various health and wellbeing, social, financial, and professional development benefits to help realize what's possible.

• Participate in fitness challenges or take advantage of exclusive discounts to corporate health insurance, gym memberships and wellness facilities via our BWell program.
• Access benefits such as travel perks, retail discounts, employee referral rewards, study, and professional development support.

Our leave options cater to the unique needs of our people; and include enhanced family support, cultural and religious leave, and options to purchase additional leave.

You can also give back and get involved in community initiatives via our BCaring program.

With a strong focus on learning and growth, we provide on the job training and formal development programs to help you succeed in your role and develop your skills and experience.

Our inclusive culture is underpinned by our core values (One, Bold, Human, Heart and Strive).

We are proud to be recognised as an Inclusive Employer for 2025-2026 by Diversity Council of Australia and a 2026-2028 Employer Committed to Gender Equality by the Workplace Gender Equality Agency (WGEA).

BDO is committed to inclusive and accessible recruitment practices. If you require any reasonable adjustments to support your application or interview process, we encourage you to contact our Talent Acquisition team at [e-mail].

We shape what matters. At BDO we are always looking ahead, thinking bigger, reaching further and always staying personal and human in everything we do. We're by your side, backing you to explore ideas and new ways of working to shape the future you want to see.