Security Risk Manager

ph3Security Risk Manager /h3 h3What you will do /h3 pAs Security Risk Manager, you act as the embedded security risk partner in the first line: close to business operations, but strongly connected with the central corporate security office, risk governance and specialist security capabilities. Risk ownership remains with line management, sectors and expertise centers; your role is to facilitate, challenge and support management teams so they understand and own their security risks. You translate imec’s corporate security policy, risk framework and standards into practical action, help make risks, decisions and remediation actions transparent, and ensure a strong connection between central Corporate Security Office expectations and local execution. /p h3Key responsibilities of this role include: /h3 ul liAct as the embedded security risk partner for assigned sectors and expertise centers, while keeping risk ownership with line management. /li liMaintain a structured security risk view for your scope, including key risks, accepted risks, mitigations, remediation actions and escalations. /li liSupport management teams in understanding, prioritizing and owning their security risks, including risk treatment, escalation and decision preparation. /li liTranslate corporate security policies, standards and risk framework expectations into practical local actions and repeatable management routines. /li liWork with security capability leads translating specialist requirements into risk-based priorities and feasible improvement actions for your business scope. /li liPrepare input for sector and expertise-center management reviews, connecting local security priorities to imec-wide security roadmap priorities. /li liSupport incident follow-up, lessons learned and structural remediation within your area of responsibility, ensuring actions are owned and followed up locally. /li liPrepare concise risk insights, decision points and escalation material for management and security governance forums. /li liContribute to the continuous improvement of imec’s first-line security risk management model and the security steward network. /li /ul h3What we do for you /h3 pWe offer you the opportunity to join one of the world’s premier research centers in nanotechnology at its headquarters in Leuven, Belgium. With your talent, passion and expertise, you’ll become part of a team that makes the impossible possible. Together, we shape the technology that will determine the society of tomorrow. /p pWe are committed to being an inclusive employer and proud of our open, multicultural, and informal working environment with ample possibilities to take initiative and show responsibility. We commit to supporting and guiding you in this process; not only with words but also with tangible actions. Through imec.academy, 'our corporate university', we actively invest in your development to further your technical and personal growth. /p pWe are aware that your valuable contribution makes imec a top player in its field. Your energy and commitment are therefore appreciated by means of a market appropriate salary with many fringe benefits. /p h3Who you are /h3 pWe are looking for a highly motivated professional who combines security expertise with strong business partnering skills. /p ul liAround 8–10 years of relevant experience in information security, cyber security, technology risk, enterprise risk management, security governance or a related advisory role. /li liA good understanding of security risk management, security controls, governance models and international frameworks such as ISO 27001, NIST Cybersecurity Framework or comparable standards. /li liThe ability to translate security risks, controls and requirements into clear business language. /li liExperience working with senior stakeholders and management teams, preferably in a complex, research-driven, technology, manufacturing or high-tech environment. /li liStrong facilitation and influencing skills, with the ability to create alignment without relying only on formal authority. /li liA pragmatic, risk-based mindset: you understand that security must protect what matters most while enabling imec’s mission. /li liThe ability to structure ambiguity, identify priorities and turn broad security challenges into concrete actions. /li liStrong analytical and critical thinking skills. /li liExcellent communication skills with diverse audiences, from technical experts to senior leadership. /li liA proactive attitude, a strong sense of ownership and the ability to get things done. /li liThe ability to work in an organized and structured manner while staying flexible in a fast-moving environment. /li liExperience with program or project management is an asset. /li liExperience with security in the semiconductor industry or a comparable high-tech environment is an asset. /li /ul pYou are someone who can build trust with the business, challenge constructively, and help management teams make better-inf