Head of Cyber Security / Chief Information Security Officer at BDO in Australia

Sydney, New South Wales, Australia -

Full Time

Start Date

Immediate

Expiry Date

14 Sep, 26

Salary

0.0

Posted On

16 Jun, 26

Experience

10 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Information Security Governance, Risk Management, Security Operations Oversight, Security Architecture Assurance, Incident Response, Third-Party Risk Management, Stakeholder Engagement, Compliance Management, ASD Essential Eight, NIST Framework, DISP, Strategic Leadership

Industry

Accounting

Description

We’re BDO, a global professional services firm connected to local markets. Our people work together to provide specialist expertise, helping businesses achieve their goals. We inspire others, to go further. We create together, to reach higher. We build trust, to lead purposefully. Whether you're building your future or starting your career with us, you won’t do it alone. From creating solutions for our clients to building careers for our people, we shape what matters, and that’s where you come in. About the Role The Head of Cyber Security / Chief Information Security Officer (CISO) leads BDO Australia’s enterprise information security program to manage information security risk and enable secure delivery of services across all offices and service lines. Reporting to the CIO, this position provides strategic leadership across security governance, risk management, security operations oversight, security architecture assurance, incident response readiness, and security culture uplift. This role partners closely with Risk, Legal/Privacy, IT Operations, Technology Delivery, and service line leaders to embed security into day-to-day ways of working and change delivery. Key responsibilities: Promote a strong security culture and shared accountability for information security across the firm. Establish and oversee third-party security risk management for key suppliers and service providers Maintain a comprehensive firm-wide information security program to protect from current and emerging internal and external threats. Identify, assess, coordinate and reports on information security risks and control effectiveness, ensuring alignment to compliance and regulatory requirements and the firm’s risk appetite. Act as key representative for information security communication, stakeholder engagement and reporting Deliver and implement the information security strategy, information security policy framework and implementation plans Provide oversight and assurance to ensure compliance with relevant security legislation and guidance, with control uplift and reporting aligned to recognised frameworks (including the ASD Essential Eight, DISP where applicable, and NIST). Ensure the highest ethical standards in the achievement of corporate objectives, based on a strong commitment to BDO Australia’s values. About You This position is suited to a senior leader with experience overseeing an enterprise information security function (strategy, governance, risk, operations and assurance), in professional services, or a complex regulated environment. Key to your success will be your ability to translate information security risk into business impact and influence leaders to make risk-based decisions aligned to risk appetite and client expectations. You will demonstrate strong information security governance and control framework capability, including experience uplifting baseline controls (e.g., ASD Essential Eight) and evidencing effectiveness through assurance/audit. Why BDO? Working for BDO you will be part of a growing and market leading professional services firm. Our national and global footprint provides our people with opportunities to work on interesting client engagements, across diverse industry sectors and services. Our open and collaborative culture ensures access to Partners and professional mentors, to guide and accelerate your professional career, across a wide array of career pathways. We provide our people with various health and wellbeing, social, financial, and professional development benefits to help realise what’s possible. Participate in fitness challenges or take advantage of exclusive discounts to corporate health insurance, gym memberships and wellness facilities via our BWell program. Access benefits such as travel perks, retail discounts, employee referral rewards, study, and professional development support. Our leave options cater to the unique needs of our people; and include enhanced family support, cultural and religious leave, and options to purchase additional leave. You can also give back and get involved in community initiatives via our BCaring program. With a strong focus on learning and growth, we provide on the job training and formal development programs to help you succeed in your role and develop your skills and experience. Our culture is underpinned by our core values (One, Bold, Human, Heart and Strive). We are proud to be recognised as an Inclusive Employer for 2025-2026 by Diversity Council of Australia and a 2024-2025 Employer of Choice for Gender Equality by the Workplace Gender Equality Agency (WGEA). BDO is committed to inclusive and accessible recruitment practices. If you require any reasonable adjustments to support your application or interview process, we encourage you to contact our Talent Acquisition team at recruitment@bdo.com.au We shape what matters. At BDO we are always looking ahead, thinking bigger, reaching further and always staying personal and human in everything we do. We’re by your side, backing you to explore ideas and new ways of working to shape the future you want to see.

Responsibilities

Lead BDO Australia's enterprise information security program to manage risk and enable secure service delivery. This includes overseeing security governance, operations, and incident response while promoting a strong security culture across the firm.