Cyber Security Consultant – Risk Management (Brussels)

About the role

We are seeking a Cyber Risk Management Advisor to strengthen our Governance, Risk and Compliance (GRC) activities, with a focus on operational risk and information security. The position is a 1‑year project based in Brussels, split 50% on‑site and 50% remote, starting as soon as possible.

Key responsibilities

• Support and monitor IT and cyber security risks owned by tribes, functions, or business units.
• Perform end‑to‑end IT and cyber security risk quality assurance from creation through treatment and closure.
• Conduct IT and cyber risk assessments on shadow‑IT situations.
• Provide advice and support on risk management to internal IT and business stakeholders.
• Report risk posture and incidents to cyber security, IT, functional, and business management.
• Contribute to the improvement of risk management methods and tools based on field experience and best practices.

Required profile

• Minimum 8 years of proven experience in technical and/or functional cyber security or risk management.
• Strong knowledge of ISMS, IT risk processes, control frameworks and audit methodologies.
• Experience with cloud services (SaaS, HSP, AWS) and software development security best practices.
• Background in release, change, incident management and testing.
• Fluent English; French and/or Dutch are a strong plus.

Required skills

• Cloud platforms: AWS, SaaS, HSP.
• Information Security Management Systems (ISMS) and IT risk processes.
• Control frameworks (e.g., ISO 27001, NIST) and audit methodologies.
• Software development security practices.
• Release management, change management, incident management, testing.