National Head of Cybersecurity Practice; Director

To lead, grow, and manage BDO Digital’s cybersecurity practice by bringing cybersecurity advisory, cyber solutions, and managed security services together as a cohesive, commercially successful business.

The individual will take responsibility for an established practice, maintain its operations, retain key talent and client relationships, and build on its capabilities, reputation, and market presence to drive further growth.

The role requires a leader who can turn clients’ cybersecurity challenges into compelling, commercially viable offerings; expand the portfolio of services and solutions; and develop multidisciplinary teams to advise clients, implement security solutions, and deliver ongoing managed services.

The leader will be accountable for the practice’s strategy, commercial performance, and service delivery, driving sustainable, profitable growth, strengthening trusted client relationships, and ensuring consistently high-quality outcomes.

The leader will position BDO Cyber as a trusted adviser, centre of excellence, and delivery partner, helping organisations manage cyber risk, protect information and critical assets, strengthen cyber resilience, and enable secure business transformation.

• Strategy and Practice Leadership
• Develop and execute a cybersecurity strategy reflecting current market positioning, target sectors, competitive differentiation and strategic alignment with the firm's strategy.
• Build and manage an integrated business model that integrates cyber advisory, cyber solutions and managed services.
• Identify opportunities and qualify them to expand services, enter new markets and develop recurring revenue.
• Set and manage clear priorities, responsibilities and performance expectations across the practice.
• Monitor market developments, client demands and emerging technologies to inform strategy and investments.
• Manage the existing practice portfolio and prioritise client retention, strategic talent and brand.
• Report practice performance, material risks and strategic priorities to relevant relationships.
• Business development and client relationships
• Develop and convert business opportunities across cyber advisory, solutions and managed services.
• Identify and develop opportunities through client relationships, strategic account planning, partnerships, and market stakeholders.
• Lead bids, tenders, proposals, solution development, pricing and commercial negotiations.
• Build trusted relationships with board members, executives and decision makers.
• Translate technical capabilities into clear propositions with measurable outcomes.
• Lead marketing initiatives with marketing to drive visibility and business opportunities.
• Financial and commercial management
• Take accountability for practice revenue, gross profit, profitability, budgets and forecasts.
• Manage the commercial performance of sub-service lines and client engagements with the cybersecurity practice.
• Ensure pricing for engagements reflects delivery costs, commercial risk, client value and applicable firm margin requirements.
• Oversee resource utilisation, project recovery, work in progress, billing and collections.
• Manage vendor and subcontractor costs, licensing commitments and delivery dependencies.
• Maintain visibility of revenue concentration, pipeline coverage and client retention risks.
• Cybersecurity advisory, solutions and managed services business
• Lead the growth and delivery of advisory services across relevant or strategic industries and sectors.
• Lead the growth and delivery of security solutions across relevant or strategic industries and sectors.
• Enhance and oversee a scalable managed services business that delivers reliable, measurable and commercially sustainable security outcomes.
• Delivery quality and technical governance
• Establish and maintain delivery methods, technical standards, and quality review processes.
• Oversee complex, high-risk engagements by providing senior guidance and resolving escalations.
• Ensure each engagement has a clear scope, deliverables, acceptance criteria, budget, and ownership.
• Review significant findings and recommendations for accuracy, relevance, and business impact.
• Govern security testing through documented authorisation, an agreed scope, and appropriate rules of engagement.
• Ensure client information is handled securely, and access controls are appropriate.
• Maintain compliance with professional standards, firm policies, and contractual obligations.
• Monitor delivery risks and intervene early when…