Information Risk Manager

pBruxelles, Belgium | Posted on 24/02/2026 /ppOur client, a major financial institution, is looking for a Dynamic Information Risk Manager to join the IT Security team to help protect the organization by identifying, assessing, managing, and reporting security risks. This position focuses on Application Security (including SSDLC, SAST, DAST, SCA) and Secure Configuration/Hardening, from a second line of defense (risk oversight) perspective. /ppAs an Information Security Risk Advisor, you will: /ppIdentify, assess, analyze, and monitor potential security risks to ensure business continuity and protect organizational integrity. /ppDevelop and maintain security policies within your domain, covering both internal and external threats. /ppOversee risk management processes to ensure compliance with internal policies, standards, and regulatory requirements. /ppEvaluate the effectiveness of existing controls, identify gaps, and recommend improvements. /ppAdvise internal stakeholders (1st line business units and agent network) and management on the implementation of effective risk mitigation strategies. /ppAnalyze security incidents, ensure proper follow-up, and contribute to structural improvements. /ppMonitor emerging threats, trends, and vulnerabilities and assess their impact on the organization. /ppDocument and report risks, findings, and mitigation plans; escalate unaddressed or unacceptable risks. /ppPrepare and deliver risk reports for internal management and regulatory bodies. /ppPromote a strong security culture by raising awareness through training, advice, and workshops. /ppLead and participate in security-related projects, including planning resources, timelines, and budgets. /ppPropose enhancements to the security policy and foster a culture of risk awareness across the bank.br/ph3Requirements /h3pA Bachelors or Master’s degree in a relevant field and preferably at least 5 years of experience in information security or risk management. /ppStrong knowledge of application security and hardening standards. /ppAnalytical mindset with the ability to challenge and evaluate technical implementations. /ppSkilled in providing clear, audience-tailored, and constructive feedback. /ppStrong communication and influencing skills; capable of convincing stakeholders of risk priorities and required actions. /ppFluent in Dutch or French with a solid understanding of the other national languages; professional proficiency in English. /ppA team player who enjoys working in multidisciplinary environments; independent, proactive, and enthusiastic. /ppCertifications such as CISSP, CISM, CISA, CCOE (or equivalent) are considered a strong asset.br/ppA dynamic and supportive work environment with offices in Anderlecht and Berchem. /ppOpportunities for continuous learning and development through extensive training—technical, regulatory, language, and personal development. /ppA healthy work-life balance, including flexible hours and the possibility to work from home. /ppA competitive salary package with attractive fringe

benefits:
meal and eco vouchers, comprehensive insurance coverage, and a flexible cafeteria plan to tailor your benefits. /ppA permanent contract and the opportunity to grow in a future-oriented, security-conscious organization.br/p