Information Security GRC Consultant

pAre you ready to make an impact in the world of Information Security, with a focus on GRC projects? Join BDO as a Information Security GRC Consultant and empower organizations to develop robust control programs that not only meet compliance requirements but also enhance their security posture. Be part of a warm, personal, and pragmatic team that makes a real impact in the industry. /p h3What will you be doing? /h3 pAs an Information Security GRC Consultant at BDO, you will play a pivotal role in delivering value to our clients and shaping the future of their information security strategies. Here’s what your day could look like: /p ul libLead maturity assessments /bof GRC programs and deliver actionable insights that drive real change. /li libDesign and implement comprehensive GRC strategies /bthat align information security practices with business objectives and industry best practices. /li libDevelop and execute policies, procedures, and controls /bto manage IT and information security risks. /li libEstablish and monitor robust IT and information security risk management programs /b, including periodic risk assessments, incident tracking, and reporting. /li libOversee third-party risk management /binitiatives to ensure that vendors and partners meet security and compliance standards. /li libSet up security awareness campaigns /b /li libMonitor cyber regulations like DORA and NIS2 /bto understand their impact on our customers. /li libCollaborate on strategic exercises /bthat help our clients elevate their GRC maturity and develop robust information security roadmaps. /li /ul h3What do you bring to the table? /h3 ul liMaster’s Degree in a relevant field and 3-5 years of relevant experience. /li liExcellent command in French or Dutch and fluency in English. /li liPassionate about Information Security and willing to create and develop GRC frameworks. /li liFamiliar with Security Standards, including NIST CSF, NIST 800-53, and ISO 27001. /li liExperience with GRC Tools and other technologies that support GRC initiatives. /li liTechnical background in IT infrastructure, networking, and cloud environments (e.g., Azure, AWS, Google Cloud) is an asset. /li liAble to translate complex risksinto clear, actionable plans. /li liExcellent communication skills with experience presenting to stakeholders at all levels, fostering solid client relationships. /li liWilling to Pursue Certifications such as CISSP, CISM, CISA, or ISO 27001 /li /ul h3What do we bring to the table? /h3 ul libCulture /b: you will join a team of experts who encourage respect, diversity and teamwork. /li libDevelopment /b: you decide the direction of your career, and we support you where necessary. /li libImpact /b: from day 1 you will be given responsibility, with support from your team. /li libGrowth /b: you get access to a whole range of training courses through our BDO Academy. /li libNetwork /b: you can work on different projects and clients, across business practices. /li libFlexibility /b: you choose where you work with flexible

working hours
. /lilibWellbeing /b: your physical and mental health is important to us. /li libProximity /b: you work in an open culture, so feel free to speak to anyone, at any level. /li libSalary /b: you receive a competitive salary package with interesting benefits. /li libSustainability /b: you work within a company with an integrated sustainability policy. /li /ul