Information Security GRC Consultant

BDO Belgium co; Brussel Hoofdstad; Hybrid; EUR 70,000 - 95,000; Full time

Job summary

BDO Belgium is seeking an Information Security GRC Consultant to help clients build robust control programs, meet compliance, and strengthen security posture. You will lead engagements and deliver practical, business-aligned GRC solutions.

In this role you will design strategies, conduct maturity assessments, and oversee third-party risk, while communicating clearly with stakeholders and pursuing certifications. A flexible, supportive team awaits at BDO Belgium.

Qualifications

• Master’s degree in a relevant field with 3–5 years of experience.
• Fluent in English; French or Dutch is a plus.
• Familiar with NIST CSF, NIST 800-53, ISO 27001.
• Experience with GRC tools and IT infrastructure knowledge.
• Ability to translate complex risks into actionable plans.
• Excellent communication and stakeholder management.

Responsibilities

• Lead maturity assessments of GRC programs and deliver actionable insights.
• Design and implement comprehensive GRC strategies.
• Develop and execute policies, procedures, and controls to manage IT and information security risks.
• Establish and monitor robust IT and information security risk management programs.
• Oversee third-party risk management initiatives to ensure security and compliance.
• Set up security awareness campaigns.
• Monitor cyber regulations like DORA and NIS2.
• Collaborate on strategic exercises to elevate GRC maturity.

Skills

GRC frameworks

Security standards

Communication skills

Client relationships

Cloud environments

GRC tools

Translating risk to action

Education

Master’s degree in a relevant field

Tools

GRC tools

Job description

Are you ready to make an impact in the world of Information Security, with a focus on GRC projects? Join BDO as a Information Security GRC Consultant and empower organizations to develop robust control programs that not only meet compliance requirements but also enhance their security posture. Be part of a warm, personal, and pragmatic team that makes a real impact in the industry.

What will you be doing?

As an Information Security GRC Consultant at BDO, you will play a pivotal role in delivering value to our clients and shaping the future of their information security strategies. Here’s what your day could look like:

• Lead maturity assessmentsof GRC programs and deliver actionable insights that drive real change.
• Design and implement comprehensive GRC strategiesthat align information security practices with business objectives and industry best practices.
• Develop and execute policies, procedures, and controlsto manage IT and information security risks.
• Establish and monitor robust IT and information security risk management programs, including periodic risk assessments, incident tracking, and reporting.
• Oversee third-party risk managementinitiatives to ensure that vendors and partners meet security and compliance standards.
• Set up security awareness campaigns
• Monitor cyber regulations like DORA and NIS2to understand their impact on our customers.
• Collaborate on strategic exercisesthat help our clients elevate their GRC maturity and develop robust information security roadmaps.

What do you bring to the table?

• Master’s Degree in a relevant field and 3-5 years of relevant experience.
• Excellent command in French or Dutch and fluency in English.
• Passionate about Information Security and willing to create and develop GRC frameworks.
• Familiar with Security Standards, including NIST CSF, NIST 800-53, and ISO 27001.
• Experience with GRC Tools and other technologies that support GRC initiatives.
• Technical background in IT infrastructure, networking, and cloud environments (e.g., Azure, AWS, Google Cloud) is an asset.
• Able to translate complex risksinto clear, actionable plans.
• Excellent communication skills with experience presenting to stakeholders at all levels, fostering solid client relationships.
• Willing to Pursue Certifications such as CISSP, CISM, CISA, or ISO 27001

What do we bring to the table?

• Culture: you will join a team of experts who encourage respect, diversity and teamwork.
• Development: you decide the direction of your career, and we support you where necessary.
• Impact: from day 1 you will be given responsibility, with support from your team.
• Growth: you get access to a whole range of training courses through our BDO Academy.
• Network: you can work on different projects and clients, across business practices.
• Flexibility: you choose where you work with flexible working hours.
• Wellbeing: your physical and mental health is important to us.
• Proximity: you work in an open culture, so feel free to speak to anyone, at any level.
• Salary: you receive a competitive salary package with interesting benefits.
• Sustainability: you work within a company with an integrated sustainability policy.