Risk & Compliance Specialist

Context:

• Within ICT, we are strongly committed to providing reliable services in accordance with Service Level Agreements and we facilitate the digital transformation of the CM-MC Group. We manage a wide portfolio of technologies that is constantly evolving. As a provider of IT solutions in a highly regulated industry, we must demonstrate compliance with various compliance requirements, both through reporting to control bodies and by providing information in internal and external audits.
   
• In this role, you will be part of the second-line audit of the Client Group. You will contribute to the demonstrability of compliance control measures and to effective and pragmatic risk management. Within ICT, you will work closely with the various ICT department directors and ICT process managers, as well as with the Risk-Security-Legal department and business stakeholders. You will actively contribute to the further professionalisation and maturity of risk management and compliance within the organisation.

Your focus here is:

Governance, processes and procedures

• Organizing risk assessments for ICT Management in accordance with the guidelines of the regulations.
• Reporting on the evolution of action plans to ICT Management and the risk committee.
• Maintaining the register of control measures for the identified risks.
• Develop measurable Compliance KPI's and Key Risk Indicators and report to management and governance committees.
• Keeping the inventory of supporting documents up-to-date for the various compliance reporting requirements.
• Identify gaps in evidence at the level of ICT governance, processes and procedures, and report on their evolution to ICT Management.
• Collaborate with suppliers and partners on compliance and audit requirements.
• Monitoring consistency and applicability within the organization.

Implementation of compliance frameworks

• Supporting the implementation and operationalization of governance and security frameworks of the Client model including COBIT, NIS2 and DORA.
• Translating regulations into concrete and workable guidelines.

Compliance- and riskmonitoring

• Following up on evolutions in regulations and translating new requirements into the Client ICT environment.

• Drafting and maintaining reports, dashboards and audit evidence.
• Substantiating compliance with internal and external audits.
• Evaluating and following up on ICT supplier risks and contributing to Third Party Risk Management processes in accordance with DORA.

Tooling and KPI’s

• Managing risks, action plans and control measures in RiskID.
• Defining and following up KPIs to demonstrate the effectiveness of controls.
• Use Power BI, Jira, and Dynatrace as a source of information for Key Risk Indicators.
• Proactively detecting and developing opportunities for improvement within the organization.

AI support

• Use AI tools for analysis, documentation, and audit preparation.

Who are you:

Required

• Minimum 3-5 years of experience in ICT risk, compliance or audit functions.
• Strong communication skills and stakeholder management.
• Experience or strong affinity with compliance and audit within an IT context.
• Interest in governance and control frameworks.
• Analytically strong and structured.
• Ability to make complex regulations understandable and applicable.
• Fluent multilingualism in Dutch, French and English.

Pros

• Certifications in ICT Governance, Risk or audit are a plus
• Experience with audit preparation or cooperation with auditors.
• Experience with NIS2, DORA or similar regulations.
• Experience with COBIT and ITIL frameworks.
• Experience with compliance in a context of procurement through public tenders.
• Knowledge of Jira and Power BI for exploiting information.
• Affinity with Agile DevOps.