IT Risk Manager

• Conduct Third-Party IT & Cyber Risk Assessments and supplier/vendor due diligence.
• Perform IT security evaluations.
• Assess cloud-based solutions, including SaaS, IaaS, PaaS, HSP, and AWS environments.
• Review IT audit reports, security assessments, compliance attestations, remediation plans, and risk findings.
• Review, challenge, and negotiate IT & Cybersecurity clauses in third-party contracts.
• Coordinate and follow up on IT & Cyber onsite audits and supplier remediation activities.
• Design processes and perform Business Analysis, particularly within IT and Security Risk Management.
• Develop ICT risk dashboards, management reports, risk assessments, and presentations for senior stakeholders.
• Collaborate with Cyber Defense, Security Architecture, Business Continuity, Data Protection, Procurement, Legal, and Business teams.
• Deliver presentations, training, mentoring, and coaching to stakeholders.

What they ask

• Fluent in French, Dutch, and English.
• 10+ years of professional experience in IT & Cyber Risk Management, Information Security, or Third-Party Risk Management.
• Master’s degree in IT, Cybersecurity, Risk Management, or equivalent professional experience.
• Strong experience in Third-Party IT & Cyber Risk Assessments, supplier/vendor due diligence, and IT security evaluations.
• Strong knowledge of IT security controls, vulnerability management, penetration testing, and security audits.
• Good knowledge of security and risk frameworks including ISO 27001, SOC 2, NIST, and OWASP.
• Strong understanding of IT Risk Management, Information Security, Operational Risk, and Third-Party Risk Management.
• Knowledge of GRC tools, preferably ServiceNow, is an additional asset.
• Experience in the Financial Services / Banking sector or large corporate environments is highly preferred.
• Strong analytical, synthesis, communication, influencing, negotiation, and stakeholder management skills.
• Ability to work autonomously, manage multiple priorities, and operate effectively in a dynamic and multicultural environment.
• Security certifications such as CISSP, CISM, CIPP, or CCSK are an additional asset.