Information Risk Manager

Il y a 3 heures

Zaventem, Flanders, Belgique EmpHire Temps plein
Job Description

Our client, a major financial institution, is looking for a Dynamic Information Risk Manager to join the IT Security team to help protect the organization by identifying, assessing, managing, and reporting security risks. This position focuses on Application Security (including SSDLC, SAST, DAST, SCA) and Secure Configuration/Hardening, from a second line of defense (risk oversight) perspective.

As an Information Security Risk Advisor, you will:

  • Identify, assess, analyze, and monitor potential security risks to ensure business continuity and protect organizational integrity.

  • Develop and maintain security policies within your domain, covering both internal and external threats.

  • Oversee risk management processes to ensure compliance with internal policies, standards, and regulatory requirements.

  • Evaluate the effectiveness of existing controls, identify gaps, and recommend improvements.

  • Advise internal stakeholders (1st line business units and agent network) and management on the implementation of effective risk mitigation strategies.

  • Analyze security incidents, ensure proper follow-up, and contribute to structural improvements.

  • Monitor emerging threats, trends, and vulnerabilities and assess their impact on the organization.

  • Document and report risks, findings, and mitigation plans; escalate unaddressed or unacceptable risks.

  • Prepare and deliver risk reports for internal management and regulatory bodies.

  • Promote a strong security culture by raising awareness through training, advice, and workshops.

  • Lead and participate in security-related projects, including planning resources, timelines, and budgets.

  • Propose enhancements to the security policy and foster a culture of risk awareness across the bank.



Requirements

  • A Bachelors or Master’s degree in a relevant field and preferably at least 5 years of experience in information security or risk management.

  • Strong knowledge of application security and hardening standards.

  • Analytical mindset with the ability to challenge and evaluate technical implementations.