Security Risk Manager

Context

You will join a growing Security Risk Management team within the CISO Office, whose mission is to strengthen the organisation's ability to identify, assess, manage, and report security risks. The role supports compliance with regulatory frameworks such as NIS2, ISO 27001, and GDPR, helping to reinforce the organisation's overall security and resilience.

Missions

• Contribute to setting up risk management processes and tools within the CISO team.
• Conduct and support risk assessments, including identification, documentation, and evaluation of risks across IT and security domains.
• Participate in project and architecture reviews to identify, assess, and document security risks, ensuring appropriate mitigation measures are defined, tracked, and aligned with the organisation's risk management framework.
• Propose and track risk responses that are proportionate and effective, ensuring mitigation plans are actionable and monitored.
• Follow up on action plans defined in the risk response to ensure timely execution and closure.
• Maintain and continuously improve the central risk register, ensuring it reflects current risk exposure and mitigation status.
• Promote awareness initiatives to foster a risk-conscious culture across the organisation.
• Contribute to the implementation and monitoring of NIS2 controls related to risk management, including reporting and documentation.

Working Conditions

• Department: CISO Office
• Location: Brussels / Hybrid
• Contract: Full-time (Long term contract with an initial duration of 3 months)

1. 10+ years of experience in cybersecurity, risk management, or related fields
2. Strong technical experience in control selection and implementation guidance (Network, IAM, SSDLC, Crypto, and more)
3. Proven experience in regulatory compliance, cybersecurity governance, risk management, or audit programmes
4. Experience translating regulatory requirements into operational controls and measurable compliance activities
5. Experience coordinating compliance programmes across multiple departments and stakeholders
6. Strong knowledge of control frameworks, policy management, and compliance monitoring practices
7. Experience preparing evidence packages for audits and regulatory reviews
8. Strong analytical, documentation, and reporting skills
9. Ability to communicate effectively with technical teams, management, auditors, and regulatory stakeholders
10. Excellent organisational and project coordination skills
11. Fluent in English; Dutch and/or French is a plus