Requirements: English
Company: KPMG Belgium
Region: Zaventem , Flanders
We are seeking experienced IT and Cyber Risk Management Professionals to support organizations in the financial sector, in strengthening their IT security posture. As a key part of the second line of defense, you will oversee risk management processes and provide independent validation and assurance to ensure that the first line is adhering to IT and cybersecurity standards. This role is pivotal in ensuring the businesss resilience against evolving cyber threats and regulatory requirements and is specifically focused on providing long-term assignments on maximum 1 or 2 clients, offering deep engagement with the client and a meaningful impact on IT and cybersecurity risk management.
Roles & Responsibilities:
- Monitor and assess IT and cybersecurity risks across the organization, focusing on second-line oversight of the first lines risk management practices.
- Conduct independent risk assessments and challenge the first lines processes and control effectiveness across applications, business solutions, assets, and third-party relationships.
- Review and validate risk assessments and treatment plans proposed by the first line, ensuring compliance with organizational and regulatory standards.
- Develop and manage IT and security control frameworks, ensuring alignment with internal policies, industry best practices, and regulatory requirements (e.g., ISO 27001, NIST, SOC).
- Support the implementation of the various aspects of DORA with the objective to achieve compliance.
- Conduct audits and provide oversight of IT and cybersecurity practices within the first line of defense, especially in third-party risk management.
- Produce independent risk reports for senior management and governance committees, synthesizing security risks and providing recommendations for risk mitigation.
- Advise on risk management strategies and propose improvements to enhance the organizations security posture and overall risk maturity.
- Act as a trusted advisor to the business, providing guidance on emerging risks and ensuring that the first line implements appropriate risk mitigations.
- Ensure the integration and coherence of risk management processes across different business units, with a focus on third-party risk.
- Oversee the review of IT and security contractual clauses with suppliers, ensuring they meet second lines standards for risk management.
- Collaborate with the first line, providing support and challenge to enhance the effectiveness of security controls and practices.
Skills & Qualifications:
- 4+ years of experience in information security or risk management, with a focus on second line functions.
- Experience in performing information security assessments or audits.
- Demonstrated experience in operational security risk management.
- Strong understanding of Information Security frameworks (ISO 27001, NIST, SOC) and their application in second line assurance activities.
- Strong understanding of the FS regulatory landscape (DORA, NBB, EBA, etc.).
- Proven ability to conduct risk oversight, challenge the first lines risk management activities, and ensure compliance with internal and external standards.
- Experience working in financial services or large-scale enterprises, with an understanding of regulatory requirements in IT and cybersecurity.
- Security certifications such as CISSP, CISM, CCSK, or similar.
- Familiarity with vulnerability management, penetration testing, and reviewing IT and security clauses in contracts.
- Knowledge of control frameworks and audit methodologies within second line risk functions.
- Strong communication and influencing skills, capable of working with senior stakeholders and challenging the first line when necessary.
- Excellent analytical and problem-solving abilities, with a focus on providing independent assurance and actionable recommendations.
- Proactive and autonomous, with the ability to manage complex tasks and processes in a dynamic environment.
- Strong team player, capable of collaborating with cross-functional teams and maintaining a good relationship between the first and second lines of defense.
- Ability to synthesize complex issues into concise and actionable reports for management and governance bodies.
We offer:
- An international corporate culture in which personal growth, mutual trust and lifelong learning are being fostered.
- A competitive and attractive compensation package and a great number of extra-legal advantages (Company car + fuel card, IPhone/IPad, group & hospitalization insurance, Allowances,) which are customizable with our Reflex@KPMG plan.
- Career and business development opportunities combined with traini