ISO 27001 ISMS Consultant - Risk & Compliance

BDO Belgium; Zaventem; On-site; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Flexible hours

Career development

Training opportunities

Open culture

Job summary

BDO Belgium is seeking an Information Security Management System Consultant (ISO 27001) to help clients assess, design, implement and audit ISMS across their organizations. You will support certification processes and advise on controls and governance while collaborating with Cybersecurity, IT Audit, and GRC teams.

You will work with clients to identify gaps, drive improvements, and deliver training to strengthen audit readiness and information security maturity.

Qualifications

• Master’s degree in Information Security or related field.
• 3–5 years’ experience in information security, ISMS consulting or auditing.
• Fluent in English and professional Dutch or French.
• ISO 27001 Lead Implementer or Lead Auditor certification is a plus.

Responsibilities

• Focus on Information Security Management System (ISO 27001) projects.
• Perform ISO 27001 opinion assessments, identifying gaps and delivering actionable recommendations.
• Guide clients through ISMS design and implementation, help establish policies, risk management processes and control frameworks.
• Conduct internal audits in line with ISO 19011 and ISO 27001, reporting on (non)conformity and opportunities for improvement.
• Participate in certification audits, supporting clients in demonstrating compliance and continuous improvement.
• Conduct certification audits as part of accredited engagements, validating client compliance with ISO 27001.
• Advise on ISO 27002 Annex A controls and their integration within the client’s existing governance structures.
• Support clients in aligning ISO 27001 initiatives with related frameworks and regulations (NIS2, DORA, NIST CSF, …).
• Deliver workshops and training sessions to strengthen internal awareness and audit readiness.
• Collaborate with colleagues across our Cybersecurity, IT Audit, Third Party Assurance and GRC teams to provide comprehensive advisory services.

Skills

Information Security

ISO 27001

Auditing

Risk Management

Client relationships

Project leadership

Communication

Education

Master’s degree in Information Security or related field

Job description

BDO Belgium is seeking an Information Security Management System Consultant (ISO 27001) to help clients assess, design, implement and audit ISMS across their organizations. You will support certification processes and advise on controls and governance while collaborating with Cybersecurity, IT Audit, and GRC teams.

You will work with clients to identify gaps, drive improvements, and deliver training to strengthen audit readiness and information security maturity.