Product Security Consultant

Bureau Veritas Cybersecurity; Amsterdam; On-site; EUR 70,000 - 110,000; Full time

Job summary

Bureau Veritas Cybersecurity is expanding its team in Europe and seeks a Product Security Consultant to strengthen the security of embedded products across industrial IoT, automotive, medical and network solutions.

You will conduct threat modeling, risk assessments and audits, provide guidance and training, and support clients in implementing ISMS/CSMS, coordinating with internal experts and certification bodies to deliver secure, compliant products on time.

Qualifications

• Several years of cybersecurity experience with a focus on embedded products.
• Knowledge of industrial IoT (IIoT) products and automotive, medical, and network domains.
• Familiar with laws and regulations related to cyber and information security (CRA, RED, NIS2).
• Knowledge or willingness to obtain security certifications (e.g., IEC 62443).
• Knowledge of security frameworks (NIST, Common Criteria, CSA, IEC 62443).
• Strong English communication, both written and spoken.
• Willingness to travel internationally.

Responsibilities

• Manage and conduct advisory assignments in cybersecurity and compliance across industrial cybersecurity, automotive, medical, and IoT.
• Guide and conduct evaluations based on recognized control frameworks used by Bureau Veritas Cybersecurity.
• Assist organizations in implementing ISMS and CSMS per relevant standards.
• Actively contribute to the development of knowledge and services.
• Coordinate with internal experts and certification bodies to align timelines and deliverables across projects.
• Support clients in tracking remediation actions and validating security controls over time.

Skills

Embedded cybersecurity

IIoT security

Threat modeling

Risk assessments

ISMS/CSMS

Client engagement

English communication

Travel readiness

Job description

Imagine your customer is a leading industrial component manufacturer, specializing in top-notch manufacturing and transportation equipment. You have ambitious goals: to streamline processes, ensure top-quality certifications for your client’s products, and guarantee cybersecurity. That’s why you come in. Our analysis will bridge any gaps in processes and products, and you will stand by your client as you address these challenges. With our expertise in penetration testing, risk assessment, and independent security evaluation, you will your client in raising their cyber resilience like never before. Your success story? It's written in the certification. Now also imagine the same story, but for products such as vehicles, medical devices, ships, IoT products, network equipment, etc. Doesn’t it sound like an exciting mission?

Bureau Veritas Cybersecurity provides cybersecurity testing, audit, training and certification services covering people, organization, and technology (networks, systems, applications and data). We are expanding our teams across key markets in Europe. That’s why we are looking for a Product Security Consultant.

We have reputable clients and they request expertise to increase their level of cybersecurity. You will be responsible for conducting threat modeling, risk assessments and audits. You will also give advice, training, and support in the areas of cybersecurity, and relevant cybersecurity standards. You will collaborate with companies such as industrial manufacturers and asset owners, vehicle manufacturers and system integrators.

As our Security Consultant you will:

• Managing and conducting advisory assignments in the field of cybersecurity and compliance, covering areas such as industrial cybersecurity but also automotive, medical/healthcare and IoT.
• Guiding and conducting evaluations based on recognized control frameworks or specific frameworks used by Bureau Veritas Cybersecurity, such as gap assessments, security maturity assessments, threat modeling and risk assessments.
• Assisting organizations in implementing ISMS and CSMS in accordance with relevant standards.
• Actively contribute to the development of knowledge and services.
• Support key clients with coordination across multiple stakeholders (internal experts, certification bodies) helping manage timelines and ensuring deliverables are aligned across projects.
• Supporting key clients in tracking remediation actions and validating that security controls are effectively implemented over time.

If you have the ambition to become a specialist in a specific domain within cybersecurity, we certainly provide opportunities within Bureau Veritas Cybersecurity to realize that ambition. We encourage knowledge sharing through our Knowledge Groups.

If you would like to build a team and to coach junior and medior level consultants; with our ambition to grow we can make it happen together with you.

You recognize yourself in the following:

• Several years of experience in the field of cybersecurity, with a specific focus on the cybersecurity of embedded products.
• Knowledge of product cybersecurity concepts, with a particular focus on industrial IoT (IIOT) products, but also covering automotive, medical, network, etc.
• Knowledge of various relevant laws and regulations related to cyber and information security, as well as the current developments in this area. Examples of such relevant laws and regulations include CRA, RED, NIS2, etc.
• Knowledge and expertise on relevant security certifications, for example IEC 62443, or a willingness to obtain them.
• Knowledge of key frameworks for information security such as NIST, Common Criteria, CSA and IEC 62443 is a plus.
• Strong verbal and written communication skills in English.
• A results-oriented personality; you know how to engage clients and colleagues.
• Availability to travel (international) if needed in order to meet customers.

What can you expect from us?

We are an organization with a strong focus on technical cybersecurity, delivering high-quality technical services in the field of digital security. You will be part of a team of motivated international specialists, where knowledge exchange is highly valued.

At Bureau Veritas Cybersecurity, we provide an environment for you to develop your talents and stimulate your professional growth. Together, we work to safeguard the security and integrity of valuable data while facing the challenges of the ever-evolving digital world.

Bureau Veritas Cybersecurity is a fast-growing company with ambitious goals. You will have the opportunity to grow along with us and shape your career allowing you to become an expert in your field.

In terms of content, we offer you a diverse portfolio of exciting clients and projects. We are part of Bureau Veritas, which means that international opportunities are expanding, both for project work and for advancing your career.

Are you the Security Consultant we are looking for?

Note: Pre-employment screening, including a Certificate of Conduct (VOG), and assessment are part of the recruitment process.