Digital Cyber Governance Lead — PCI & Security Advisory

BDO UK LLP; Birmingham; Hybrid; GBP 65,000 - 85,000; Full time

Job summary

BDO UK LLP is seeking an Assistant Manager to help deliver cyber governance engagements within the Digital team. You will mentor junior staff, manage client work streams and contribute to the ongoing growth of our advisory practice.

You will apply extensive knowledge of cyber security controls and regulatory requirements to help financial services, fintech and other regulated clients achieve stronger risk management and governance outcomes.

Qualifications

• Practical experience supporting compliance, advisory or assurance engagements against security standards.
• Experience in Cyber Security, Information Security, Technology Risk, IT Audit or Operational Risk.
• Knowledge of cyber security frameworks including ISO 27001/27002/NIST CSF/COBIT/CIS Controls.
• Experience guiding compliance assessments, control testing, remediation planning and governance reporting.
• Experience managing small teams with strong project management and organisational skills.
• Understanding of payment security principles and PCI DSS is advantageous.
• PCI DSS QSA certification and other related certifications are advantageous.

Responsibilities

• Deliver high-quality client engagements in Digital, Cyber Governance.
• Develop and mentor team members on cyber governance engagements.
• Support growth of the practice through effective delivery.
• Lead PCI DSS advisory and assurance engagements and related CSP work.

Skills

Compliance engagements

Cyber Security

Security frameworks

Client advisory

Team management

Project management

PCI DSS knowledge

Education

PCI DSS QSA certification

CISSP

CISA

CRISC

COBIT

ACA

ACCA

CIA

Job description

BDO UK LLP is seeking an Assistant Manager to help deliver cyber governance engagements within the Digital team. You will mentor junior staff, manage client work streams and contribute to the ongoing growth of our advisory practice.

You will apply extensive knowledge of cyber security controls and regulatory requirements to help financial services, fintech and other regulated clients achieve stronger risk management and governance outcomes.