Job Description

We’re BDO, a global professional services firm connected to local markets. Our people work together to provide specialist expertise, helping businesses achieve their goals.

We inspire others, to go further. We create together, to reach higher. We build trust, to lead purposefully.

Whether you're building your future or starting your career with us, you won’t do it alone. From creating solutions for our clients to building careers for our people, we shape what matters, and that’s where you come in.

About the Role

As a Senior Consultant within BDO’s Cyber Security Practice, you will be involved in technical design and engineering of Microsoft 365 and Azure security environments. This is an individual contributor role ideal for a professional who excels at architecting and deploying security configurations and solutions. You will be responsible for the technical delivery of M365 security services—including Microsoft Purview, Defender and Sentinel engineering and cloud hardening—providing clients with the high-level technical foundations required to secure their digital landscapes.

You will play a pivotal role in the team by bridging the gap between risk management and technical execution—ensuring that the security controls we recommend are not only compliant with frameworks like the Essential Eight, ISO 27001, NIST, etc. but are practically deployed, optimised, and technically sound.

The Service Line

This role will be part of the Cyber Security team within the Advisory Service Line within BDO Australia. The Cyber Security team provides the following core cyber services:

• GRC, e.g. Cyber resilience assessment, Cyber strategy and roadmap development, Cyber framework implementations (i.e. ISO 27001, E8, NIST, industry specific), cyber awareness training, etc.
• Offensive security, e.g. penetration testing, social engineering / red teaming, configuration reviews, security validation, SOC validation services, etc.
• Resilience, e.g. Incident response services, cyber security crisis and resilience services, cyber exercises, security operations (design, implementation and validation), cyber threat intelligence services, etc.
• Security enablement, e.g. security technology configurations, dashboard development (operational, board), security tooling, etc.

Key Duties and Responsibilities

As a Senior Consultant you will predominantly work on technical security assessments and security engineering whilst providing support to the team’s other service pillars.

This is a technical role within the Security Enablement team focussing on:

• Technical delivery of Microsoft 365 (M365) security services, covering:
  • Microsoft 365 Security and compliance deployments
  • Azure cloud security deployments
  • Microsoft Purview, CoPilot for Security, Defender and Sentinel deployments
• Provide advice and guidance to clients on best practice for securing their M365 tenancy
• Perform security risk assessments against client Microsoft deployments and provide recommendations for uplift
• Assist in the design and deployment of Microsoft as well as other vendor security technologies within client environments
• Support Partners and managers with technical input and scoping for proposals and engagement letters
• Maintain technical skills and knowledge of emerging security technologies
• Be active within the cyber security industry and community to stay on top of latest security industry trends and building out your network.

Skills/Attributes Required

• Strong knowledge, and demonstrable experience, of cyber security industry standards (e.g. Essential 8, ISO 27001, NIST CSF, etc.)
• An understanding of technical threat risk assessments concepts (IT, IoT, SCADA, Cloud)
• Solid understanding of cloud infrastructure and security architecture principles
• Hands-on experience with configuring and maintaining Microsoft 365 environments
• Hands-on experience with configuring and maintaining Microsoft security technology
• Solid understanding of Microsoft E5, e.g. Purview, Defender and Sentinel
• Ability to adapt to new technologies and learn quickly
• Experience with explaining technical cyber security concepts to a technical and non-technical audience
• Advisory / consulting experience - either to external clients or internal teams
• Involvement in the cyber security community
• Anticipates needs and takes initiative without prompting.
• Seeks feedback, learns quickly, and applies insights to improve results.
• Delivers high‑quality work with strong attention to detail and accuracy.
• Prioritises effectively, plans work, and meets deadlines consistently.

Qualifications and Experience Required

• 3+ years professional experience working in a related cyber security discipline
• Certification in one or more of the following:
  • Microsoft Security, Compliance, and Identity Fundamentals (SC-900) - basics of Zero Trust, identity, and the overall Microsoft security landscape
  • Microsoft 365 Fundamentals (MS-900) - essential for understanding the M365 ecosystem
  • Azure Fundamentals (AZ-900) - baseline for any cloud security engineering
  • Microsoft Information Protection Administrator (SC-400) - focusing on DLP, data classification, and information governance
  • Microsoft Security Operations Analyst (SC-200) – covering threat protection, XDR, and Microsoft Sentinel engineering.
• 2-3 years Microsoft 365 administration experience
• Azure security engineering experience is highly regarded
• A tertiary qualification in information technology, computer science, cyber security, or a related field is highly desirable (but not mandatory)
• Experience in a professional services environment is highly desirable (but not mandatory).

Why BDO?

Working for BDO you will be part of a growing and market leading professional services firm.

Our national and global footprint provides our people with opportunities to work on interesting client engagements, across diverse industry sectors and services.

Our open and collaborative culture ensures access to Partners and professional mentors, to guide and accelerate your professional career, across a wide array of career pathways.

We provide our people with various health and wellbeing, social, financial, and professional development benefits to help realise what’s possible.

Participate in fitness challenges or take advantage of exclusive discounts to corporate health insurance, gym memberships and wellness facilities via our BWell program. Access benefits such as travel perks, retail discounts, employee referral rewards, study, and professional development support.

Our leave options cater to the unique needs of our people; and include enhanced family support, cultural and religious leave, and options to purchase additional leave. You can also give back and get involved in community initiatives via our BCaring program.

With a strong focus on learning and growth, we provide on the job training and formal development programs to help you succeed in your role and develop your skills and experience.

Our culture is underpinned by our core values (One, Bold, Human, Heart and Strive).

We are proud to be recognised as an Inclusive Employer for 2025-2026 by Diversity Council of Australia and a 2024-2025 Employer of Choice for Gender Equality by the Workplace Gender Equality Agency (WGEA).

BDO is committed to inclusive and accessible recruitment practices. If you require any reasonable adjustments to support your application or interview process, we encourage you to contact our Talent Acquisition team at recruitment@bdo.com.au