An experienced IT and Cyber Risk Management Advisor is sought to support the Governance, Risk and Compliance team of a large financial organization. The consultant will assist IT and business stakeholders in identifying, assessing, monitoring, and reducing IT and cyber risks across applications, assets, projects, Agile teams, and third parties. The role requires strong experience in IT risk management, information security governance, control frameworks, and stakeholder advisory.
This assignment is suitable for a GRC professional with strong analytical skills, excellent communication abilities, and the capacity to translate complex IT and cyber risk topics into clear, structured, and actionable recommendations.
What you do
- Supporting and monitoring IT and cyber security risks owned by business units, functions, tribes or IT teams
- Performing IT and cyber risk quality assurance from risk creation to treatment and closure
- Conducting risk assessments on applications, projects, Shadow IT situations and third-party environments
- Advising IT and business stakeholders on IT and cyber security risk management practices
- Monitoring remediation actions and supporting risk treatment plans
- Reporting IT and cyber risks and overall risk posture to cyber security, IT, business and management stakeholders
- Contributing to the continuous improvement of risk management methods, processes and tools
- Linking ISMS activities with broader IT risk management processes
- Supporting control, audit and compliance-related activities
- Working closely with internal stakeholders across security, IT, business, risk, compliance and operations
What they ask
- At least 8 years of experience in IT risk, cyber risk, information security, IT governance or a related domain
- Strong experience in IT and cyber risk management
- Experience linking ISMS processes with IT risk processes
- Knowledge of control frameworks and audit methodologies
- Experience with risk assessment, risk treatment, remediation follow-up and risk reporting
- Good understanding of IT and cyber security policies, controls and governance models
- Significant experience with cloud services such as SaaS, hosted services or AWS
- Knowledge of software development security best practices
- Experience with release management, change management, incident management and testing processes
- Ability to produce clear, structured and concise documentation
- Excellent English writing and communication skills
- English plus at least one local language: French or Dutch
- Strong stakeholder management skills, with the ability to interact with technical, business and management audiences
- Autonomous, proactive, analytical, precise and control-minded
Nice-to-have.
- Experience in a banking or financial services environment
- Security certifications such as CISSP, CISM, CIPP or CCSK
- Experience with third-party risk management
- Experience with GRC or IT risk tooling
- Knowledge of Agile delivery environments
- Experience working with senior management or executive reporting
How to apply
View the full assignment text and application details once your tailored application is ready.
Order a tailored application to view the full assignment and application details.
More context, less searching.
You get enough context to judge whether this job is relevant. The full brief, client details and next steps stay available inside the app.