Risk Manager IT - AI Tribe

Context
The assignment sits within the AI Tribe of a major international banking group. It covers the identification, structuring, prioritization and mitigation of technology, operational, regulatory and AI-related risks.

Missions

• Analyze and challenge risk findings from internal audit, information security, risk management, architecture reviews and external assessments.

• Consolidate and restructure risk observations into coherent risk themes, remediation streams and implementation plans.

• Define concrete mitigation actions and ensure alignment with architecture, security, operational and regulatory requirements.

• Coordinate with squads, architects, product owners and Tribe leadership to secure the execution of remediation actions.

• Track implementation progress, dependencies, residual risks and target dates.

• Report the overall risk posture, remediation status and risk reduction gains to Tribe management and governance bodies.

• Help build a lasting risk management culture within the Tribe.

• Organize quarterly risk assessment meetings to track audit progress and risk closure.

• Manage the end-to-end risk lifecycle, from identification to closure.

• Review existing risk inventories and turn fragmented findings into structured remediation programs.

• Translate risk statements into implementation actions, backlog items, epics and concrete delivery plans.

• Define target operating models and mitigation roadmaps with architects and delivery teams.

• Ensure risks are properly assessed, prioritized and documented.

• Challenge remediation proposals so that they address root causes, not just symptoms.

• Coordinate risk reduction initiatives across multiple squads and stakeholders.

• Run regular risk review sessions with Tribe leadership.

• Maintain a consolidated view of risk exposure, mitigation progress and residual risks.

• Prepare management reporting and executive-level summaries.

• Support audits, regulatory reviews and control assessments.

• Build trusted relationships with Product Owners, Architects, Delivery Leads, Security Officers and business representatives.

• Contribute to the continuous improvement of risk management frameworks, tools and reporting.

• Support the implementation of AI governance, operational resilience and regulatory compliance requirements where applicable.

• Act as the Tribe’s single point of contact for risk governance activities.

Working conditions

• Mainly based in Brussels, with occasional travel across the group’s entities.

• Expected remote work: 50% on site, 50% from home.

• End of assignment: 30/11/2027 (renewable).

• At least 5 years in IT risk, operational risk, cybersecurity, technology governance or technology transformation

• Strong track record in operational, IT and cyber risk management, risk management frameworks and control methodologies

• Leading complex remediation programs, from translating audit findings and risk assessments into action plans through to governing their implementation

• Experience with internal audits, regulatory inspections and supervisory reviews

• Experience in banking, insurance or financial services, with knowledge of their regulatory environment

• Experience in large, complex organizations, including cross-functional transformation initiatives

• Working in an Agile organization (tribes, squads, chapters) and with multidisciplinary teams (architecture, security, delivery)

Technical knowledge

• Good understanding of software delivery, DevSecOps, public cloud, and SaaS and enterprise platforms

• Knowledge of security frameworks and control environments

• Experience in change management, release management and operational governance

• Experience in AI governance, model risk management or responsible AI, with knowledge of the NIST AI RMF or the EU AI Act

Soft skills

• Analytical and structuring skills: turning ambiguous situations into action plans

• Communication and influence: ability to challenge stakeholders constructively, build consensus and shape decisions

• Executive-level reporting and writing: concise documents and presentations to senior management

• Ability to mentor and coach teams on risk management practices

• Fluent English ; French or Dutch: a plus

Education and certifications

• Bachelor’s or Master’s degree in IT, engineering, cybersecurity or risk management, or equivalent experience

• At least one mandatory certification among: CRISC, CISA, CISSP, ISO 27001 Lead Implementer or Lead Auditor, PMP, PRINCE2, an Agile certification, ITIL Foundation