AI Risk & Compliance Leader — Operational Resilience

Rhox; Brussel; On-site; EUR 90,000 - 130,000; Full time

Job summary

Rhox, a Belgian insurance organisation, is expanding its AI-enabled IT risk and governance framework across cloud, AI, and process automation. The Senior AI IT Risk, Compliance & Operational Resilience Consultant will assess AI models, data, LLMs, and third-party AI services against the European AI Act and related controls.

The role spans IT, cybersecurity, data, and digital teams, delivering risk registers, remediation tracking, supplier oversight, and executive dashboards during a 12-month

Qualifications

• At least 10 years of senior IT risk and governance experience.
• Experience in financial or insurance sectors with regulatory context.
• Knowledge of AI models, data, LLMs, and third-party AI services.

Responsibilities

• Strengthen ICT and AI risk management framework with governance controls.
• Lead AI solution risk assessments and document risks in risk registers.
• Define and monitor remediation and control-strengthening plans with stakeholders.
• Evaluate AI models, data, LLMs, cloud services, and third-party providers for resilience and security.
• Build risk indicators and executive dashboards for AI/ICT risk.
• Prepare opinions and evidence for audits and regulatory inspections.

Skills

IT risk governance

Senior IT risk experience

AI/Generative AI understanding

Regulatory knowledge (AI Act, DORA,GD

Operational resilience

Stakeholder communication

Risk assessment leadership

Tools

Microsoft Word

Microsoft Excel

PowerPoint

Job description

Rhox, a Belgian insurance organisation, is expanding its AI-enabled IT risk and governance framework across cloud, AI, and process automation. The Senior AI IT Risk, Compliance & Operational Resilience Consultant will assess AI models, data, LLMs, and third-party AI services against the European AI Act and related controls.

The role spans IT, cybersecurity, data, and digital teams, delivering risk registers, remediation tracking, supplier oversight, and executive dashboards during a 12-month