Cyber Strategy & Architecture Internship: Cyber Safe Behaviour

NVISO GmbH; Brussel Hoofdstad; Hybrid; EUR 6,700 - 13,000; Full time

Job summary

NVISO is seeking a motivated intern to join Cyber Strategy & Architecture, contributing to a Power BI‑driven Cyber Safe Behaviour Dashboard and an Awareness‑as‑a‑Service Catalogue. You will help transform phishing and awareness data into actionable insights, supporting consultants and clients with evidence‑based recommendations.

The internship involves building a data layer, KPI frameworks, and a structured catalogue, with mentorship and opportunities to work across BE, EUR, and global markets.

Qualifications

• Pursuing a degree in Computer Science, Data and Business Analytics, or related field.
• Hands-on affinity with Power BI, including Power Query, data modelling and data analytics.
• Professional working proficiency in English and Dutch.
• Interest in data visualization and translating data into clear recommendations.
• Understanding of cyber threats and security best practices.
• Strong organisational, structuring and attention‑to‑detail skills.

Responsibilities

• Review available phishing simulation, awareness and training data sources.
• Define the KPI framework for phishing and awareness reporting.
• Build Power BI visualisations and management reporting views.
• Implement an Excel/CSV‑based data ingestion process.
• Implement one API connector to a selected platform.
• Create a close-the-gap view linking findings to interventions.
• Analyse trends over time and perform market analysis in BE/EUR/global.

Skills

Power BI

Power Query

Data modelling

Data analytics

English proficiency

Dutch proficiency

Education

Computer Science degree

Data Analytics degree

Tools

Power BI tools

Job description

Cyber Strategy & Architecture Internship: Cyber Safe Behaviour

Who are we?

NVISO is a pure‑play cyber security consulting firm: our team is composed of security professionals who each have their specific field of expertise, ranging from Information Security Governance, Risk & Compliance to Incident Response, Penetration Testing, CSIRT/SOC, Software Security, and Training & Awareness. This fantastic blend of skills enables us to help organizations prevent, detect, and respond to complex security challenges.

What will you do?

Clients increasingly ask NVISO not only to operate phishing simulation and awareness programmes, but also to help them interpret the results: Which behavioural security indicators matter? What do they reveal about the organisation’s human risk? Which action should follow?

Today, this analysis is largely performed manually, based on reports and exports from phishing simulation and awareness platforms. During this internship, you will help transform this manual effort into a reusable NVISO asset.

The internship consists of two connected workstreams:

• Cyber Safe Behaviour Dashboard: developing a Power BI dashboard that consolidates phishing simulation and awareness data into clear, actionable behavioural‑security insights.
• NVISO Awareness-as-a-Service Catalogue: creating a structured overview of NVISO’s awareness and training opportunities, taking the dashboard conclusions/recommendations as input to serve as possible interventions when gaps are identified.

The dashboard identifies where risks exist; the Awareness-as-a-Service Catalogue helps identify the most appropriate response. Together, they will support consultants and account teams in moving from data and reporting to practical, evidence‑based recommendations.

The first workstream focuses on the development of a Power BI‑based Cyber Safe Behaviour Dashboard.

The dashboard will bring together data from phishing simulations, awareness campaigns and training activities. It will provide consultants and clients with a structured overview of behavioural security performance, trends and areas for improvement.

The initial solution will use an Excel‑based data layer and should be designed to work with data exports from phishing simulation or awareness platforms. Where feasible and depending on access to a selected platform, the intern may also implement one API‑based data connector.

The dashboard is expected to provide insights at management, team or department level. Individual‑level data should only be used where necessary, properly anonymised or pseudonymised, and in line with GDPR, proportionality and NVISO’s non‑punitive approach to behavioural security.

Main activities

• Review available phishing simulation, awareness and training data sources.
• Define the KPI framework
• Build Power BI visualisations and management reporting views.
• Implement an Excel/CSV‑based data‑ingestion process.
• Implement one API connector to a selected platform.
• Create a “close-the-gap” view that links weak KPI results to recommended awareness interventions.
• Building a baseline to then analyse trends over time, such as pre‑ and post‑campaign performance.
• Market analysis of awareness tools, solutions etc in the current cyber security market (BE, EUR, Global)

Workstream 2 – NVISO Awareness-as-a-Service Catalogue

The second workstream focuses on creating a structured Awareness-as-a-Service Catalogue for NVISO.

NVISO already delivers a broad range of awareness and training opportunities, but relevant information may be spread across different documents, service descriptions, presentations and pricelists. The intern will help create a more consistent and machine‑readable catalogue that can serve as the foundation for dashboard recommendations.

The catalogue will focus primarily on awareness and training offerings, while also capturing selected adjacent NVISO services, e.g. threat reporting/ SOC findings, that may be relevant when dashboard findings indicate a broader security issue.

The objective is to create a practical first version of the catalogue, a consistent template and a documented maintenance approach that NVISO can expand over time.

Main activities

• Inventory NVISO’s existing awareness and training offerings.
• Review available service lists and pricelists relevant to awareness and behavioural security.
• Structure these offerings in a consistent catalogue format in relation to cyber security threats.
• Define a standard structure for each offering.
• Create a basic mapping between common behavioural security issues and suitable awareness interventions.
• Identify selected adjacent services that may be relevant for account‑team follow‑up.
• Document a maintenance process for keeping the catalogue up to date.

Requirements

• Currently be pursuing a degree in one of the following or a related field: Computer Science, Data and Business Analytics, Business or Applied Informatics, Information Management, Cyber Security.
• Hands‑on affinity with Power BI, including Power Query, data modelling and data analytics.
• Professional working proficiency in English and Dutch.
• An interest in data visualization and translating data into clear recommendations.
• Interest in cyber security, particularly phishing, social engineering and security awareness and training.
• A basic understanding of common cyber threats and security best practices.
• Strong organisational, structuring and attention‑to‑detail skills.
• An interest in the commercial side of consulting and in how data‑driven findings can support service recommendations.
• Awareness of, or willingness to learn about, GDPR, data minimisation and non‑punitive use of behavioural data.
• Good communication skills and the ability to work with stakeholders from different service lines.

Output of Internship:
By the end of the internship, you will have delivered either:

• A documented Excel‑based data layer and refresh process.
• A defined KPI framework for phishing and awareness reporting.
• Dashboard views for management and team or department‑level reporting.
• A basic behavioural risk score and trend‑analysis capability.
• A rules‑based “close-the-gap” view linking behavioural findings to recommended interventions.
• Where feasible, one API‑based connector to a selected phishing simulation or awareness platform.

Awareness-as-a-Service Catalogue

• A maintenance guide for updating the catalogue after the internship
• A structured Awareness-as-a-Service Catalogue.
• A consistent template for describing awareness and training offerings.
• An initial mapping between selected threats, awareness interventions and internal expertise.
• A limited mapping to relevant adjacent NVISO services.
• A market analysis on current Cyber Security Awareness & Training tooling/ services.

Practical Information

• Working model: Hybrid
• Start date: From February 2027
• Eligibility: You must be eligible to work in Belgium and meet the eligibility conditions applicable to this assignment.
• University agreement: This internship must be part of your academic programme and covered by an internship agreement with your university.
• Support: You will be supported by a dedicated NVISO mentor throughout your internship.
• Future opportunities: A successful internship may lead to further opportunities at NVISO after graduation, depending on mutual fit and available positions.