Tribe Risk Officer

We are looking for an experienced Tribe Risk Officer to support an AI Tribe within a large, complex financial services environment based in Brussels.

The role focuses on identifying, structuring, prioritizing and mitigating technology, operational, cybersecurity, regulatory and AI-related risks.

The successful candidate will translate audit findings, risk observations and recommendations into actionable remediation plans, ensuring effective implementation, monitoring and governance through Agile delivery processes.

Acting as a bridge between Risk Management, Information Security, Architecture, Delivery Management and Business stakeholders, the Tribe Risk Officer will drive measurable risk reduction while contributing to a sustainable risk management culture.

Responsibilities

• Own the end-to-end risk lifecycle, from identification and assessment to remediation and closure.
• Review and challenge findings from Internal Audit, Information Security, Risk Management, Architecture and external assessments.
• Consolidate fragmented risk observations into structured remediation programs.
• Translate risk findings into actionable backlog items, epics, mitigation roadmaps and delivery plans.
• Define mitigation actions and target operating models with architects and delivery teams.
• Ensure risks are assessed, prioritized, documented and addressed at root-cause level.
• Coordinate remediation initiatives across multiple Agile squads and stakeholders.
• Monitor implementation progress, dependencies, deadlines and residual risks.
• Facilitate risk review sessions with Tribe leadership.
• Organize quarterly risk evaluation meetings to monitor audit findings and risk closure.
• Prepare executive reporting on risk exposure, remediation progress and risk reduction.
• Support audits, regulatory reviews and control assessments.
• Contribute to AI governance, operational resilience and regulatory compliance initiatives.
• Improve risk management frameworks, tools, processes and reporting.
• Act as the Tribe’s Single Point of Contact for risk governance activities.

Technical skills

Must have

• Bachelor’s or Master’s degree in IT, Engineering, Cybersecurity, Risk Management or equivalent professional experience.
• Minimum 5 years of experience in IT Risk, Operational Risk, Cybersecurity, Technology Governance or Technology Transformation.
• Strong knowledge of Operational Risk, IT Risk and Cyber Risk Management.
• Proven experience managing complex risk remediation programs across multiple stakeholders.
• Demonstrated ability to translate audit findings and risk assessments into executable delivery plans.
• Experience in risk remediation planning and implementation governance.
• Experience working in Agile organizations using Tribes, Squads and Chapters.
• Strong understanding of software delivery, DevSecOps and cloud environments.
• Experience with SaaS, public cloud and enterprise platforms.
• Knowledge of security frameworks and control environments.
• Experience in change management, release management and operational governance.
• Experience collaborating with Architecture, Security and Delivery teams.
• Strong understanding of risk management frameworks and control methodologies.
• Experience in large, complex organizations and cross-functional transformation initiatives.
• Ability to facilitate workshops, align stakeholders and challenge decisions constructively.
• Strong executive communication, reporting and presentation skills.
• Excellent analytical, organizational and problem-solving capabilities.
• Ability to work independently and drive collaboration.
• Strong ownership, accountability and execution-oriented mindset.

Should have

• Experience in AI Governance, Model Risk Management or Responsible AI.
• Familiarity with NIST AI RMF, the EU AI Act or emerging AI governance frameworks.
• Knowledge of financial sector regulatory environments.
• Experience in banking, insurance or financial services.
• Experience supporting regulatory inspections, internal audits or supervisory reviews.

Nice to have

• CRISC certification.
• CISA certification.
• CISSP certification.
• ISO 27001 Lead Implementer or Lead Auditor certification.
• PMP, PRINCE2 or Agile certification.
• Knowledge of French or Dutch.

Who we are

Community Consulting goes beyond traditional consulting; it’s all about fostering connections in an atmosphere of trust and confidence.
Transparency & Honesty : We say things as they are. Clear communication for seamless collaboration.
#COMMUNITEAM : Work independently, but never alone. Collective intelligence drives us fu