Cybersecurity Risk & Compliance Consultant

About the role

Join the Governance, Risk, and Compliance (GRC) team of a major international financial institution as a senior Cybersecurity Risk & Compliance Consultant. You will act as a strategic partner, helping IT and Business units design, implement and monitor robust operational risk management practices with a focus on information security.

Key responsibilities

• Oversee the full risk lifecycle QA process, from identification through treatment to closure.
• Provide pragmatic advisory support on IT and cyber security risk to internal stakeholders.
• Conduct shadow‑IT assessments for applications operating outside standard governance.
• Synthesize complex data and produce executive reports on overall risk posture and specific cyber threats.
• Contribute to the evolution of internal risk‑management methodologies and tools.

Required profile

• Minimum 8 years of experience in IT and cyber risk management, preferably in banking or highly regulated environments.
• Master’s degree preferred.
• Relevant security certifications such as CISSP, CISM, CIPP or CCSK.
• Fluent English with strong writing skills and proficiency in French or Dutch.
• Highly autonomous, proactive and able to communicate risk effectively to technical teams and senior management.

Required skills

• Deep knowledge of ISMS and control frameworks, including IT audit methodologies.
• Extensive experience with cloud security governance (AWS, SaaS, HSP).
• Strong understanding of secure SDLC practices.
• Practical expertise in ITIL processes: Change, Release, Incident Management and Testing.