Cyber Risk Advisor

Are you fascinated by cyber security and dealing with cyber risks in complex and changing environments? Are you familiar with Information Security and Compliance Frameworks such as NIST CSF, ISO27001/2, SWIFT CSP or others? Do you possess strong analytical skills to assess the maturity of our clients’ cyber security capabilities? Would you like to have the opportunity to contribute to the cyber resilience of organizations while enhancing your expertise?

Join the BDO family, a worldwide consulting firm where you can bring your own personality to your job! We help organisations grow sustainably with our expertise in audit & assurance, tax & legal, advisory, accountancy, sustainability (ESG) and digital solutions.

At BDO, you are not just a number. Your wellbeing and development are just as important to us as the personal, hands-on advice and pragmatic solutions we offer our clients. Because as you grow, so do we and so do our clients. That is why our slogan is 'Let's Grow Together'!

As a Cyber Risk Advisor, you will help clients stay ahead in a fast-evolving digital world. Here’s a snapshot of what you’ll be doing:

• Risk Assessment & Management: Conduct risk assessments to identify vulnerabilities and threats to exploit them, assess the impact and likelihood, and recommend actionable steps to address these risks.
• Cybersecurity: Define requirements to protect the confidentiality, integrity and availability of data. Provide guidance on implementing controls within specific security domains such as encryption, access controls, and incident response.
• Compliance: Support clients in meeting regulatory requirements and standards (e.g., DORA, NIS 2, GDPR, SOX, ISO27001) and prepare them for compliance audits.
• Business Continuity: Create and test business continuity and disaster recovery plans for seamless operation during disruptions.
• Data Governance & Privacy: Design data governance frameworks to ensure privacy and secure management of data.
• Client Communication: Engage with client stakeholders, presenting findings and recommendations clearly and effectively.

• Master’s degree in Information Technology, Risk Management, Cybersecurity, or a related field.
• 2-5 years in technology risk management, cybersecurity, or compliance, ideally in consulting.
• Proficient in frameworks (NIST, ISO 27001), security tools, and knowledge of data protection practices.
• Project management skills to apply at client projects and structure your own tasks while working on different tasks at the same time.
• Strong problem-solving skills with experience in risk analysis and reporting.
• Excellent interpersonal skills and the ability to clearly communicate complex concepts to clients.
• Outstanding communication skills in FR/NL/EN.