Business Risk and Continuity Analyst

Il y a 2 semaines

Brussel Hoofdstad, Brussel Hoofdstad, Belgique NTek Software Solutions Temps plein 60 000 € - 90 000 € Contrat

To assess, prioritize and trace cyber risks related to industrial systems and their IT dependencies present on public infrastructures managed by SPW MI (tunnels, dams, locks, remote management, road equipment, fiber optics, etc.) and recommend appropriate treatment measures.

Key Activities

  • List OT assets (PLC, RTU, HMI, field networks) and their IT dependencies in the unified CMDB.
  • Identify the SPOFs: Domain Controller, inter-network links, critical markets, firewalls…

Operational risk analysis

  • Apply the SPW methodology to model threats (tunnel closure, dam overflow, etc.), vulnerabilities and impacts (safety of people, environment, availability, finances, image, etc.)
  • Use concrete scenarios based on the lessons learned from the 2025 crisis by the client.

Treatment plan & prioritization

  • Develop the implementation plan for actions to address the analyzed risks (reduction, avoidance, transfer, acceptance).
  • Quantify the cost/impact and develop a risk reduction roadmap aligned with the business continuity of the systems
  • Communicate the complete risk management cycle.

Project & Market Integration

  • Draft the IT/OT security clauses in the specifications.
  • Verify the compliance of critical OT suppliers (PLC maintenance, supervision).
  • Translate OT risks into logging requirements and detection rules for the SOC (use-case, PLC takeovers, …).
  • Participate in restoration tests and OT/IT table-top exercises to validate impact hypotheses.
  • Contribute to feedback and analyze the root causes
  • Contribute to the continuous improvement of business continuity plans (BCP) and disaster recovery plans (DRP).

Reporting & Governance

  • Keep the OT risk register up to date, prepare summaries for the Cyber MI Committee and for NIS2 audits (risk management policy).

Examples of deliverables

  • Business continuity plan and disaster recovery plan
  • Detailed inventory of OT assets & IT dependencies (CMDB).
  • OT risk register with scoring, scenarios, owners and deadlines.
  • Mapping of zones & conduits + flow diagrams.
  • Prioritized treatment plan (24-month roadmap).
  • Safety requirements grids for OT purchases/modernizations.
  • Quarterly reports to the Coordinator: risk status, progress, decisions to be arbitrated.

Expected behavioral skills

  • Assertiveness and the ability to be proactive
  • You are independent but you enjoy working in a team
  • Excellent communicator, customer and results oriented
  • Positive and caring attitude, active listening
  • Ability to teach and simplify technical aspects