Specialist, Security Architect

pWe're BDO, a global network connected to local markets. Our people work together to provide specialist expertise, helping businesses achieve their goals and grow. /p pWe inspire others, to go further. We create together, to reach higher. We build trust, to lead purposefully. /p pWhether you're building your future or starting your career – with us, you won’t do it alone. From creating solutions for our clients to building careers for our people, we shape what matters, and that’s where you come in. /p h3Role: Specialist, Security Architect /h3 pThe Security Architect is responsible for defining, governing and continuously improving BDO Global's security architecture across both Global Corporate Network (GCN) and Global Hosting Services (GHS) environments. The role ensures that security is embedded secure-by-design and secure-by-default across platforms, services, applications and initiatives, with a strong emphasis on Microsoft technologies including Azure, Microsoft 365, Sentinel, Defender, Lighthouse and Intune. The architect provides authoritative technical leadership and acts as a security advisor to development and delivery initiatives, ensuring security requirements are embedded throughout the solution lifecycle. This includes advising on application and platform design, cloud-native services, identity integration, data protection and secure development practices. The role translates security strategy, risk and regulatory requirements into pragmatic, scalable architectural patterns and standards, supporting global member firms, central platforms and shared services while ensuring alignment with BDO Global's ISMS, Zero Trust principles and industry best practice (ISO 27001, NIST CSF 2.0, Microsoft security baselines). /p h3Key

Responsibilities:
/h3 h3Security Architecture Design Authority /h3 ul liAct as the design authority for security architecture across GCN and GHS platforms. /li liDefine and maintain security reference architectures, patterns and standards, aligned to BDO Global's Cyber Security Reference Architecture and Microsoft best practices. /li liReview and approve solution designs, ensuring consistent application of Zero Trust, least privilege, defence-in-depth and resilience principles. /li liProvide architectural assurance for new initiatives, major changes and technology onboarding. /li /ul h3Microsoft Security Platform Architecture /h3 ul liDesign and govern security architecture across: /li liMicrosoft Defender (Endpoint, Identity, Cloud Apps, Office 365) /li liMicrosoft Sentinel (SIEM/SOAR architecture, data onboarding, detection strategy) /li liMicrosoft Lighthouse (multi-tenant visibility and governance) /li liIntune (endpoint, mobile device and application management) /li liEnsure Microsoft Secure Score and Defender/Sentinel maturity improvements are architecturally driven and measurable. /li /ul h3Governance, Risk Compliance Alignment /h3 ul liEnsure security architectures align with ISO 27001, NIST CSF 2.0, SOC 2, GDPR and internal ISMS controls. /li liTranslate regulatory and audit requirements into technical security controls and design patterns. /li liSupport internal and external audits by providing architectural artefacts, rationale and traceability. /li liContribute to risk assessments, threat modelling and design-time control validation.
Embed threat modelling, abuse-case analysis and exposure-aware design into solution architecture. /li liEnsure architectural alignment with vulnerability management, CTEM and threat intelligence outputs. /li liPromote secure development and platform engineering practices across global teams. /li /ul h3Stakeholder Engagement Advisory /h3 ul liAct as a trusted security advisor to Global IT, platform owners, engineering teams and member firms. /li liSupport both GCN and GHS stakeholders with pragmatic, risk-based architectural guidance. /li liCollaborate closely with Security Operations, GRC, Identity, Infrastructure, Cloud and Service Delivery teams. /li liMonitor emerging security technologies, Microsoft roadmap changes and industry trends. /li liIdentify opportunities to simplify, standardise and automate security architecture controls. /li liContribute to maturity roadmaps, KPIs and continuous improvement initiatives. /li /ul h3Qualifications and

Experience:
/h3 ul liBachelor's degree in Cyber Security, Information Technology, Computer Science or equivalent experience. /li li7+ years' experience in information security, with significant experience in security architecture roles. /li liDemonstrated experience designing security architectures in cloud-first, Microsoft-centric environments. /li liStrong background in enterprise identity, cloud security, endpoint security and SIEM/SOAR architectures. /li liExperience operating in complex, global or multi-tenant environments. /li liSecurity certifications are highly regarded (e.g. CISSP, CISM, CCSP, SABSA, AZ-305 (Azure Solutions Architect Expert), AZ-500 (Azure Security Engineer Associ