IT & Cyber Risk Management Specialist

Are you an expert in IT and Cybersecurity Risk Management? We're looking for a talented individual to join our Governance, Risk, and Compliance (GRC) team, supporting both IT and Business Units in identifying and addressing operational risks. In this role, you'll play a key part in shaping and executing risk management strategies, with a strong focus on information security and vendor risk oversight.

Where : Brussels, Belgium

How : Hybrid, 50% remote

Key Responsibilities:

• Conduct comprehensive IT and cybersecurity risk assessments across a range of business applications, projects, and third-party providers.
• Evaluate and monitor third-party IT services to ensure compliance with contractual obligations, particularly around information security.
• Coordinate and execute IT and cybersecurity audits with a focus on identifying vulnerabilities and mitigating risks.
• Prepare concise risk reports and one-pagers for executive stakeholders, outlining critical insights and actionable recommendations.
• Design and implement processes for end-to-end IT and security management, with a focus on third-party relationships.
• Provide expert consulting to internal teams (IT & Business) on cyber risk mitigation, enhancing risk management maturity, and delivering impactful reporting and follow-ups.
• Serve as the primary point of contact for IT and Cyber risk management services, building strong relationships with stakeholders and ensuring seamless communication.
• Contribute to refining risk management tools, methodologies, and processes related to third-party oversight.
• Draft and review IT security clauses in supplier contracts to safeguard critical services.

Requirements:

• Fluency in French and English (mandatory) ; Dutch is an excellent bonus.
• Bachelor's/Master's degree or equivalent experience in IT, cybersecurity, or related fields.
• Professional certifications (CISSP, CISM, ISO27001, etc.) are a plus.
• Minimum of 5 years of experience in information security, process design, risk management, and business analysis.
• Strong technical background with expertise in cloud services (SaaS, AWS) and software development security best practices.
• Experience in third-party risk assessments and managing cybersecurity within large enterprises, ideally in financial services.
• Strong knowledge of key cybersecurity frameworks (ISO27001, SOC, NIST) and proficiency in MS Office.

Soft Skills:

• Proactive, self-starter with a team-oriented mindset.
• Excellent communication and presentation skills, with the ability to synthesize complex information into clear, actionable insights.
• Strong problem-solving abilities and keen attention to detail.
• Comfortable working in a fast-paced, dynamic, and multicultural environment.
• Ability to mentor and support colleagues in risk management initiatives.

Hybrid Working: Enjoy a flexible work arrangement with 50% onsite and 50% remote work options

Apply Now to Nelson.Vandescotte@oliverjames.com