Technology Risk & IT Assurance Consultant

About the role

As a Technology Risk & IT Assurance Consultant you will lead and support technology assurance engagements for BDO Malta’s clients, ensuring compliance with regulatory standards and helping organisations manage their data security and privacy.

Key responsibilities

• Lead and support technology assurance engagements such as external audits, GDPR/privacy audits, IT internal audits and ISAE 3402 reports.
• Assess clients’ data lifecycle, security and privacy practices to ensure regulatory compliance.
• Manage client relationships and deliver high‑quality, timely outputs.
• Contribute to business development and thought‑leadership initiatives.
• Stay abreast of emerging technologies and regulatory trends.
• Support internal quality improvement and knowledge‑sharing initiatives.

Required profile

• Bachelor’s degree in Management Information Systems, Information Security or a related field.
• 2–4 years of experience in technology advisory, assurance, internal audit or risk consulting.
• Experience with technology audits, internal controls and compliance testing.
• Relevant certifications such as CISSP, CISA, CRISC, ISO 27001 Lead Auditor or CIPP/E are a strong advantage.

Required skills

• Technology audit methodology
• Internal control assessment
• Compliance testing (e.g., GDPR, ISO 27001)
• Risk assessment and mitigation
• Familiarity with ISAE 3402 reporting standards

What we offer

• Opportunities for long‑term career growth within a supportive environment.
• Exposure to a diverse portfolio of local and international clients.
• Collaboration across the global BDO network.
• Structured learning programmes and on‑the‑job development.
• Performance‑based progression.