Information Security Technical Consultant

About the role

Join BDO’s Risk Advisory team as an Information Security Technical Consultant. You will work hands‑on with clients to uncover vulnerabilities, assess risk, and guide them toward secure, compliant, and resilient operations across infrastructure, applications, and cloud environments.

Key responsibilities

• Perform penetration tests and vulnerability assessments on networks, systems, applications and cloud platforms.
• Act as the primary client contact, define project scope and translate business needs into technical action plans.
• Conduct technical security audits, review configurations and evaluate the effectiveness of controls.
• Assess network, system and cloud architectures, identify weaknesses and recommend improvements.
• Support information‑security maturity assessments aligned with frameworks such as ISO 27001, NIS2, DORA and Cyber Fundamentals.
• Translate technical findings into clear, practical remediation advice.
• Contribute to internal and external audits, validating control design and effectiveness.
• Collaborate with BDO colleagues in Cybersecurity, IT Audit, GRC and Digital for integrated advisory projects.

Required profile

• Bachelor’s or master’s degree in Computer Science, Information Security or a related field.
• 2–5 years of hands‑on experience in technical security assessments, ethical hacking or IT/OT security audits.
• Fluent in French and English or Dutch and English.
• Strong analytical, reporting and communication skills.
• Proactive, pragmatic mindset with a drive to continuously learn.

Required skills

• Penetration testing
• Vulnerability assessment
• Network, system and cloud security
• Security frameworks: ISO 27001, NIS2, DORA, NIST CSF, CIS Controls
• Use of common security tools and testing methodologies
• OT/ICS security knowledge (nice to have)
• Security certifications such as OSCP, CEH, ISO 27001 Lead Implementer/Auditor (nice to have)

What we offer

• A collaborative, expert‑driven environment focused on personal growth.
• Opportunities to deepen cybersecurity expertise across diverse industries.
• Supportive culture that values wellbeing, development and pragmatic client solutions.