Manager Cyber & IT Risk - Financial Sector

About the role

KPMG is seeking an experienced Cyber and IT Risk Manager to support financial institutions in navigating cybersecurity, regulatory compliance, and risk management. You will work with banks, market infrastructures, and payment providers, helping them build resilient digital operations.

Key responsibilities

• Lead cyber and IT risk assessments covering technology, cloud, and third‑party exposures.
• Design and implement DORA frameworks, including risk management, governance, resilience testing, and incident handling.
• Advise clients on cybersecurity governance aligned with DORA, NIS2, ISO 27001, COBIT, and related regulations.
• Conduct regulatory gap analyses, develop roadmaps, and support implementation plans.
• Collaborate with CISO, Risk, Compliance, IT, and Audit teams to ensure cohesive delivery.
• Manage projects end‑to‑end, handling planning, budgeting, and reporting.
• Coach and mentor team members, contribute to internal training and methodology development.
• Support business development activities, proposals, RFPs, and thought‑leadership initiatives.

Required profile

• 5+ years of experience in financial services (banking, insurance, market infrastructures) in cybersecurity, IT risk, operational risk, or regulatory/compliance roles.
• Strong knowledge of DORA (mandatory) and familiarity with NIS2, EBA/EIOPA, ECB/NBB guidelines, ISO 27001, COBIT, ITIL.
• Proven project‑management experience and ability to lead complex initiatives.
• Excellent communication skills with senior stakeholders (CISO, CRO, CIO, etc.).
• Analytical mindset to translate technical and regulatory requirements into actionable solutions.
• Comfortable discussing AI‑related topics and adapting to emerging technologies.
• Fluent in English and Dutch or French.

Required skills

• DORA framework implementation
• NIS2 compliance
• ISO 27001
• COBIT
• ITIL

What we offer

• Attractive remuneration with extra‑legal benefits (electric company car, allowances, bonus, personal device, cafeteria plan).
• Flexible work arrangements, including up to 20 days of remote work per year.
• Comprehensive insurance package with full KPMG contributions.