Cyber Strategy & Architecture Internship Cyber Safe Behavior

NVISO is a pure-play cyber security consulting firm: our team is composed of security professionals who each have their specific field of expertise ranging from Information Security Governance Risk & Compliance to Incident Response Penetration Testing CSIRT/SOC Software Security and Training & Awareness. This fantastic blend of skills enables us to help organizations prevent detect and respond to complex security challenges.

Clients increasingly ask NVISO not only to operate phishing simulation and awareness programmes but also to help them interpret the results: Which behavioural security indicators matter What do they reveal about the organisations human risk Which action should follow

Today this analysis is largely performed manually based on reports and exports from phishing simulation and awareness platforms. During this internship you will help transform this manual effort into a reusable NVISO asset.

The internship consists of two connected workstreams:

1. Cyber Safe Behaviour Dashboard: developing a Power BI dashboard that consolidates phishing simulation and awareness data into clear actionable behavioural-security insights.

2. NVISO Awareness-as-a-Service Catalogue: creating a structured overview of NVISOs awareness and training opportunities taking the dashboard conclusions/recommendations as input to serve as possible interventions when gaps are identified.

The dashboard identifies where risks exist; the Awareness-as-a-Service Catalogue helps identify the most appropriate response. Together they will support consultants and account teams in moving from data and reporting to practical evidence-based recommendations.

Workstream 1 Cyber Safe Behaviour Dashboard

The first workstream focuses on the development of a Power BI-based Cyber Safe Behaviour Dashboard.

The dashboard will bring together data from phishing simulations awareness campaigns and training activities. It will provide consultants and clients with a structured overview of behavioural security performance trends and areas for improvement.

The initial solution will use an Excel-based data layer and should be designed to work with data exports from phishing simulation or awareness platforms. Where feasible and depending on access to a selected platform the intern may also implement one API-based data connector.

The dashboard is expected to provide insights at management team or department level. Individual-level data should only be used where necessary properly anonymised or pseudonymised and in line with GDPR proportionality and NVISOs non-punitive approach to behavioural security.

• Review available phishing simulation awareness and training data sources.

• Design a practical reusable data model in Power BI.

• Define the KPI framework

• Build Power BI visualisations and management reporting views.

• Implement an Excel/CSV-based data-ingestion process.

• Implement one API connector to a selected platform.

• Create a close-the-gap view that links weak KPI results to recommended awareness interventions.

• Building a baseline to then analyse trends over time such as pre- and post-campaign performance.

• Market analysis of awareness tools solutions etc in the current cyber security market (BE EUR Global)

Workstream 2 NVISO Awareness-as-a-Service Catalogue

The second workstream focuses on creating a structured Awareness-as-a-Service Catalogue for NVISO.

NVISO already delivers a broad range of awareness and training opportunities but relevant information may be spread across different documents service descriptions presentations and pricelists. The intern will help create a more consistent and machine-readable catalogue that can serve as the foundation for dashboard recommendations.

The catalogue will focus primarily on awareness and training offerings while also capturing selected adjacent NVISO services e.g. threat reporting/ SOC findings that may be relevant when dashboard findings indicate a broader security issue.

The objective is to create a practical first version of the catalogue a consistent template and a documented maintenance approach that NVISO can expand over time.

• Inventory NVISOs existing awareness and training offerings.

• Review available service lists and pricelists relevant to awareness and behavioural security.

• Identify duplicate descriptions inconsistent naming or missing information.

• Structure these offerings in a consistent catalogue format in relation to cyber security threats.

• Define a standard structure for each offering.

• Create a basic mapping between common behavioural security issues and suitable awareness interventions.

• Identify selected adjacent services that may be relevant for account-team follow-up.

• Document a maintenance process for keeping the catalogue up to date.

• Currently be pursuing a degree in one of the following or a related field: Computer Science Data and Business Analytics Business or Applied Informatics Information Management Cyber Security.

• Hands-on affinity with Power BI including Power Query data modelling and data analytics.

• Strong Excel skills.

• Professional working proficiency in English and Dutch.

• An interest in data visualization and translating data into clear recommendations.

• Interest in cyber security particularly phishing social engineering and security awareness and training.

• A basic understanding of common cyber threats and security best practices.

• Strong organizational structuring and attention-to-detail skills.

• An interest in the commercial side of consulting and in how data-driven findings can support service recommendations.

• Awareness of or willingness to learn about GDPR data minimisation and non-punitive use of behavioural data.

• Good communication skills and the ability to work with stakeholders from different service lines.

By the end of the internship you will have delivered either:

• A Power BI Cyber Safe Behaviour Dashboard prototype.

• A documented Excel-based data layer and refresh process.

• A defined KPI framework for phishing and awareness reporting.

• Dashboard views for management and team or department-level reporting.

• A basic behavioural risk score and trend-analysis capability.

• A rules-based close-the-gap view linking behavioural findings to recommended interventions.

• Where feasible one API-based connector to a selected phishing simulation or awareness platform.

• A maintenance guide for updating the catalogue after the internship

• A structured Awareness-as-a-Service Catalogue.

• A consistent template for describing awareness and training offerings.

• An initial mapping between selected threats awareness interventions and internal expertise.

• A limited mapping to relevant adjacent NVISO services.

• A market analysis on current Cyber Security Awareness & Training tooling/ services.

• Location: Brussels Belgium

• Working model: Hybrid

• Start date: From February 2027

• Duration: Minimum 4 months (5-6 months preferred)

• Unpaid internship

• Eligibility: You must be eligible to work in Belgium and meet the eligibility conditions applicable to this assignment.

• University agreement: This internship must be part of your academic programme and covered by an internship agreement with your university.

• Support: You will be supported by a dedicated NVISO mentor throughout your internship.

• Future opportunities: A successful internship may lead to further opportunities at NVISO after graduation depending on mutual fit and available positions.