Domain Lead – Transformation & Cybersecurity Strategy Adoption

About the role

As a Domain Lead – Transformation & Cybersecurity Strategy Adoption you will drive lasting change at SNCB/NMBS by embedding cybersecurity into the organisation’s culture, processes and ways of working. You will co‑author and implement security policies and lead the change‑management track across all cybersecurity projects.

Key responsibilities

• Prepare, co‑author and implement cybersecurity policies in collaboration with the CISO GRC team, operational departments and HR, ensuring they are legally sound and enforceable.
• Own and drive the change‑management workstream for all cybersecurity projects, from awareness campaigns to training roll‑outs and adoption monitoring.
• Translate cybersecurity strategy into concrete, role‑specific guidance for business units and project teams.
• Track adoption, maturity and strategic KPIs, reporting to executive leadership and adapting approaches based on evidence.
• Align transformation programmes with risk appetite, governance frameworks and industrial‑relations requirements, coordinating with HR on policy impacts.

Required profile

• Master’s degree in Business Administration or equivalent experience in organisational change.
• Minimum 5 years of experience leading change‑management programmes in regulated or complex multi‑stakeholder environments.
• Proven ability to produce clear policy documents, executive briefings and stakeholder communications for non‑technical audiences.
• Fluent in English (C1), French (C2) and Dutch (C2).

Required skills

• Excellent written communication for policy and briefing documents.
• Strong stakeholder engagement and resistance‑management capabilities.

What we offer

• Remote work possibility and flexible working hours.
• 35 days of leave, company car and public‑transport season ticket.
• Target bonus and comprehensive insurance package covering family.
• Supplementary pension, work‑disability and death insurance, meal and eco‑vouchers.
• Net allowances for remote work, car‑wash and internet budget.