Information Security GRC Consultant

pAre you ready to make an impact in the world of Information Security, with a focus on GRC projects? Join BDO as a Information Security GRC Consultant and empower organizations to develop robust control programs that not only meet compliance requirements but also enhance their security posture. Be part of a warm, personal, and pragmatic team that makes a real impact in the industry. /ph3What will you be doing? /h3h3Role /h3pAs an Information Security GRC Consultant at BDO, you will play a pivotal role in delivering value to our clients and shaping the future of their information security strategies. Here’s what your day could look like: /pulliLead maturity assessments of GRC programs and deliver actionable insights that drive real change. /liliDesign and implement comprehensive GRC strategies that align information security practices with business objectives and industry best practices. /liliDevelop and execute policies, procedures, and controls to manage IT and information security risks. /liliEstablish and monitor robust IT and information security risk management programs, including periodic risk assessments, incident tracking, and reporting. /liliOversee third-party risk management initiatives to ensure that vendors and partners meet security and compliance standards. /liliSet up security awareness campaigns /liliMonitor cyber regulations like DORA and NIS2to understand their impact on our customers. /liliCollaborate on strategic exercises that help our clients elevate their GRC maturity and develop robust information security roadmaps. /li /ulh3What do you bring to the table? /h3ulliMaster’s Degree in a relevant field and 3-5 years of relevant experience. /liliExcellent command in French or Dutch and fluency in English. /liliPassionate about Information Security and willing to create and develop GRC frameworks. /liliFamiliar with Security Standards, including NIST CSF, NIST 800-53, and ISO 27001. /liliExperience with GRC Tools and other technologies that support GRC initiatives. /liliTechnical background in IT infrastructure, networking, and cloud environments (e.g., Azure, AWS, Google Cloud) is an asset. /liliAble to translate complex risksinto clear, actionable plans. /liliExcellent communication skills with experience presenting to stakeholders at all levels, fostering solid client relationships. /liliWilling to Pursue Certifications such as CISSP, CISM, CISA, or ISO 27001 /li /ulh3What do we bring to the table? /h3ulliCulture: you will join a team of experts who encourage respect, diversity and teamwork. /liliDevelopment: you decide the direction of your career, and we support you where necessary. /liliImpact: from day 1 you will be given responsibility, with support from your team. /liliGrowth: you get access to a whole range of training courses through our BDO Academy. /liliNetwork: you can work on different projects and clients, across business practices. /liliFlexibility: you choose where you work with flexible

working hours
. /liliWellbeing: your physical and mental health is important to us. /liliProximity: you work in an open culture, so feel free to speak to anyone, at any level. /liliSalary: you receive a competitive salary package with interesting benefits. /liliSustainability: you work within a company with an integrated sustainability policy. /li /ul