Information Technology Risk Manager

Asenium is looking for a Senior Tribe Risk Officer to support an AI Tribe in a complex enterprise environment. You will translate technology, operational, regulatory and AI-related risks into actionable remediation roadmaps, connecting Risk, Security, Architecture, Delivery and Business teams.

Work setup: Hybrid in Brussels, Belgium. 50% on-site / 50% homeworking, with occasional travel.

Responsibilities:

• Own the risk lifecycle from identification, assessment and prioritization through to closure.
• Consolidate audit findings and risk observations into structured remediation programs addressing root causes.
• Translate risks into mitigation actions, backlog items, epics and delivery roadmaps.
• Coordinate remediation across squads, architects, product owners, security teams and Tribe leadership.
• Track delivery progress, dependencies, deadlines, risk exposure and residual risks.
• Lead regular risk reviews and quarterly evaluation meetings; prepare executive reporting on remediation and risk reduction.
• Support audits, control assessments, regulatory compliance, AI governance and operational resilience requirements.
• Act as the risk governance point of contact and improve risk management practices, frameworks and reporting.

Must-have requirements:

• Minimum 5 years’ experience in IT Risk, Operational Risk, Cybersecurity, Technology Governance or Technology Transformation.
• Strong expertise in operational, IT and cyber risk management, security frameworks and control methodologies.
• Proven experience managing complex remediation programs and translating audit findings into actionable delivery plans.
• Experience in Agile organizations, including Tribes, Squads and Chapters.
• Strong understanding of software delivery and DevSecOps; experience with SaaS, public cloud and enterprise platforms.
• Experience in change management, release management and operational governance.
• Experience leading cross-functional transformation initiatives and stakeholder workshops in large, complex organizations.
• Strong analytical, planning, influencing and executive reporting skills, with an independent, execution-focused approach.
• Bachelor’s or Master’s degree in IT, Engineering, Cybersecurity or Risk Management, or equivalent experience.
• English proficiency, spoken and written. French or Dutch are a plus.