Cyber Risk & Control Architect (CISO)

Bpost; Brussel Hoofdstad; Hybrid; EUR 123,000 - 190,000; Full time

Benefits offered by this job

Meal vouchers

Insurance (health, disability)

Phone subscription with data

Flexible remuneration plan

Company car / bike leasing

Mobility plan

Work from home

Flexible working hours

Extra leave days

End-of-year bonus

Access to 100+ partner benefits

Job summary

Bpost is seeking a senior Cyber Risk & Control Architect to shape our Group Cyber Risk & Control Framework and cyber governance across more than 20 entities. You will translate threats and regulatory needs into clear risks, controls and actions for executive leadership.

The role requires extensive experience in cybersecurity governance, risk management and compliance, and offers exposure to senior stakeholders, international operations and a comprehensive benefits package.

Qualifications

• Experienced cybersecurity governance, risk and compliance professional.
• Proven ability to design governance frameworks and reporting processes.
• Experience with large, international organisations and senior stakeholder engagement.
• Strong analytical and strategic thinking to translate risk into actions.

Responsibilities

• Design and evolve the Group Cyber Risk & Control Framework across 20+ entities.
• Translate threats, regulatory requirements and audit findings into risks, controls and actions.
• Support risk appetite discussions at Executive Committee and Board level.
• Develop reporting covering cyber risk, programme delivery, control effectiveness and NIS2 compliance.
• Lead selection and evolution of GRC tooling and data processes.

Skills

GRC expertise

Cyber risk management

Regulatory compliance

ISO 27001

NIS2

NIST CSF

Cyber governance

Auditing

Fluency in English

Stakeholder influence

Tools

GRC tooling

Job description

As part of the international group bnode, bpost has transitioned from the Belgian postal operator to a regional and digital expert in parcel size logistics. With a focus on social and environmental sustainability, our people are the foundation of everything we do. We foster a culture that supports diversity, inclusion and career growth, ensuring that every team member has the opportunity to thrive and succeed

What will you do?

Bnode is strengthening its Group CISO Office and is looking for a senior Cyber Risk & Control Architect (Director level) to help shape how cybersecurity risk is governed across our international organisation.

In this role, you will design and continuously evolve the Group Cyber Risk & Control Framework, providing a common approach to cyber risk, controls, compliance and reporting across more than 20 entities.

Working closely with the Group CISO and Cyber Program Management Lead, you will translate evolving cyber threats, regulatory requirements, audit findings and business priorities into clear risks, controls and actions. You will combine strategic thinking with practical implementation, helping senior leaders make informed, risk-based decisions and strengthening cyber governance across Bnode.

Your mission

Shape our Group Cyber Risk & Control Framework

• Own and continuously improve the Group Cyber Risk & Control Framework.
• Define cyber risk scenarios, control objectives, KRIs and maturity criteria.
• Translate emerging threats, regulatory requirements, audit findings and maturity assessments into clear cyber priorities.
• Support risk appetite discussions and risk-based decision-making at Executive Committee and Board level.

Strengthen governance, compliance and reporting

• Define and maintain the methodology supporting the Group Cyber Plan.
• Create clear traceability between cyber risks, controls, regulatory requirements, remediation plans and strategic initiatives.
• Develop integrated reporting covering cyber risk, programme delivery, control effectiveness and NIS2 compliance.
• Support reporting to senior management, the Board and the Audit & Risk Committee.

Develop our cyber data, processes and tooling

• Design scalable processes to collect, validate and consolidate cyber data across more than 20 entities.
• Establish reporting cycles, responsibilities and data-quality standards.
• Develop the data model connecting risks, controls, compliance obligations, action plans and reporting.
• Lead the selection and evolution of GRC and related cyber governance tooling.
• Drive greater automation and standardisation across cyber risk, compliance and reporting.

Drive continuous improvement

• Ensure the framework evolves with the threat landscape, regulation, audit findings and changing business priorities.
• Promote greater consistency and maturity across the Group while recognising the needs of different entities.
• Identify opportunities to improve control effectiveness, risk visibility and the quality of cyber reporting.

Who are you?

Your profile

You are an experienced cybersecurity professional who can combine strong GRC expertise with the ability to influence at senior level.

You Bring

• Around 10+ years of experience in cybersecurity governance, cyber risk, compliance, audit or cybersecurity consulting.
• Strong expertise in cyber risk management, control frameworks and regulatory compliance.
• Experience working within large, complex and preferably international organisations.
• Proven experience designing governance frameworks, operating models and reporting processes.
• Experience implementing or managing GRC, risk-management or compliance tooling.
• Strong knowledge of frameworks and regulations such as CyFun, NIS2, ISO 27001, NIST CSF and DORA.
• Strong analytical and conceptual skills, with the ability to turn complex cyber risks into clear priorities and actions.
• The confidence and communication skills to engage, influence and challenge stakeholders from operational teams through to Board level.
• Fluency in English. Dutch and/or French is an asset.

This is an opportunity to play a central role in shaping Bnode's Group-wide approach to cyber risk and controls, with significant exposure across our international organisation and senior leadership.

What do we offer?

Like a Long-awaited Parcel, We Want To Make You Feel Welcome And Valued. Our Offer Includes a Competitive Monthly Salary, That Goes Without Saying. On Top Of That, You Can Count On

• Meal vouchers of €8 per working day
• Hospitalization-, group- and disability insurances
• A phone subscription, including 25GB data
• A flexible renumeration plan, which allows you to customize your own benefits. A company car, bike leasing, public transportation, extra days off,... the choice is yours
• Possibility to enter the Federal Mobility plan
• Work/life balance, thanks to flexible working hours and the possibility to work from home
• 20 days of statutory leave and 7 additional extralegal days off
• An end-of-year and performance-based bonus and double holiday pay
• Many benefits from more than 100 Bpost-partners

#Bpost #Bnode