Domain Lead – Transformation & Cybersecurity Strategy Adoption

About the role

As a Domain Lead – Transformation & Cybersecurity Strategy Adoption you will drive lasting change across SNCB/NMBS by embedding cybersecurity into the organisation’s culture, processes and ways of working. You will co‑own the preparation and implementation of security policies and lead the change‑management track across all cybersecurity projects.

Key responsibilities

• Prepare, co‑author and implement cybersecurity policies in collaboration with the CISO GRC team, operational departments and HR, ensuring they are legally sound, people‑centred and enforceable.
• Own and drive the change‑management workstream for all cybersecurity projects, including awareness campaigns, training roll‑outs, resistance management and adoption monitoring.
• Translate cybersecurity strategy into concrete, role‑specific guidance for business units and project teams.
• Track adoption, maturity and strategic KPIs, reporting to executive leadership and adapting the approach based on evidence.
• Ensure transformation programmes align with risk appetite, governance frameworks and industrial‑relations requirements, coordinating with HR on policy impacts.

Required profile

• Master’s degree in Business Administration or equivalent experience in organisational change and stakeholder engagement.
• At least 5 years of experience leading change‑management programmes or organisational transformation in a regulated or complex multi‑stakeholder environment.
• Excellent written communication skills, able to produce clear policy documents, executive briefings and stakeholder communications for non‑technical audiences.
• Fluent in English (C1), French (C2) and Dutch (C2).

Required skills

• Change‑management methodology (stakeholder analysis, impact assessment, readiness tracking, communication planning, benefits realisation).
• Policy development and implementation in a cybersecurity context.
• Stakeholder engagement and coalition building across HR, senior leadership and operational teams.

What we offer

• Hybrid work model with remote flexibility and flexible working hours.
• 35 days of leave, company car and public‑transport season ticket.
• Target bonus and comprehensive insurance package (including family coverage, hospitalisation, dental care, supplementary pension, disability and death insurance).
• Meal vouchers, eco‑vouchers, remote‑working and car‑wash allowances, internet budget.