IT and Cyber Risk Management Advisor Expert

This is a consultancy mission at a client site, where you will represent Keystone Solutions as an IT and Cyber Risk Management Advisor - Expert. As a Keystone Solutions consultant, you will be hired to work on client projects, bringing your expertise to dynamic environments and contributing to the success of our clients.

You will join the Governance, Risk and Compliance (GRC) team, supporting IT and Business Units in developing robust operational risk management practices, with a focus on Information Security. Your responsibilities will be carried out under Keystone Solutions’ consultancy model and include:

• Identifying operational IT and Cyber risks on assets, applications, projects, Agile Constructs (Tribes, Squads), and third parties.
• Advising, consulting, monitoring, and reporting on risk treatment to reduce overall risk exposure at an optimized cost.
• Elaborating and managing the implementation of flexible strategies to reduce IT and Cyber risks in accordance with group policies.

• Support and monitor IT and Cyber Security risks owned by Tribes, Functions, or Businesses.
• Perform IT and Cyber security risk quality assurance from creation through treatment to closure.
• Conduct IT and Cyber risk assessments on Shadow IT situations (applications outside IT governance).
• Provide advice and support on IT and Cyber Security Risk Management to internal IT and Business stakeholders.
• Report IT and Cyber security risks and overall risk posture to Cyber Security, IT, Functions, or Business Management.
• Contribute to improving risk management methods and tools, leveraging field experience and best practices.

• Sound knowledge of English as well as at least one local language.
• Dutch and French are considered a plus.

• Master’s degree required.

• Security certifications such as CISSP, CISM, CIPP, CCSK are preferred.

• Expectation: 50% on site and 50% homeworking.

• At least 8 years of acknowledged experience in the technical and/or functional domain.

• Experience linking different ISMS and IT Risk processes.
• Knowledge of control frameworks and audit methodologies.
• Significant experience with cloud services (SaaS, HSP, AWS).
• Knowledge of software development security best practices.
• Experience in release management, change management, incident management, and testing.

• Experience in a banking environment.

• Autonomy, commitment, and perseverance in personal organization.
• Quick self-starter, pro-active attitude, team player.
• Results-oriented, responsible, and resourceful.
• Excellent English writing skills.
• Excellent communication and interpersonal skills, able to work effectively with stakeholders at all levels.
• Strong analytical and synthesis skills, able to produce structured and concise documents, precise and methodological.
• Accurate and control-minded, yet flexible.