Director of Cyber Risk & Controls

Bpost; Brussel Hoofdstad; Hybride; EUR 120 000 - 180 000; Plein temps

Avantages offerts par ce poste

Meal vouchers €8 per working day

Insurance: hospitalization, group, and

Phone subscription with 25GB data

Flexible renumeration plan

Company car, bike leasing, or public交通

Federal Mobility plan

Work from home option

40 days total leaves (20+ extralegal)

Year-end & performance bonus

Benefits from Bpost partners

Résumé du poste

Bnode is seeking a senior Cyber Risk & Control Architect (Director level) to shape governance across its international organisation. You will define the Group Cyber Risk & Control Framework, translate threats into risks and controls, and lead reporting to senior management and the Board. Fluency in English is essential; Dutch and/or French is a plus.

This role offers strategic influence and broad exposure. You will work with the Group CISO Office, drive risk visibility, and advance automation

Qualifications

• Around 10+ years of experience in cybersecurity governance, cyber risk, compliance, audit or cybersecurity consulting.
• Strong expertise in cyber risk management, control frameworks and regulatory compliance.
• Experience working within large, complex and preferably international organisations.
• Proven experience designing governance frameworks, operating models and reporting processes.
• Experience implementing or managing GRC, risk-management or compliance tooling.
• Strong knowledge of frameworks and regulations such as CyFun, NIS2, ISO 27001, NIST CSF and DORA.
• Strong analytical and conceptual skills, with the ability to turn complex cyber risks into clear priorities and actions.
• The confidence and communication skills to engage, influence and challenge stakeholders from operational teams through to Board level.
• Fluency in English. Dutch and/or French is an asset.

Responsabilités

• Own and continuously improve the Group Cyber Risk & Control Framework.
• Define cyber risk scenarios, control objectives, KRIs and maturity criteria.
• Translate emerging threats, regulatory requirements, audit findings and maturity assessments into clear cyber priorities.
• Support risk appetite discussions and risk-based decision-making at Executive Committee and Board level.
• Define and maintain the methodology supporting the Group Cyber Plan.
• Create clear traceability between cyber risks, controls, regulatory requirements, remediation plans and strategic initiatives.
• Develop integrated reporting covering cyber risk, programme delivery, control effectiveness and NIS2 compliance.
• Support reporting to senior management, the Board and the Audit & Risk Committee.
• Design scalable processes to collect, validate and consolidate cyber data across more than 20 entities.
• Establish reporting cycles, responsibilities and data-quality standards.
• Develop the data model connecting risks, controls, compliance obligations, action plans and reporting.
• Lead the selection and evolution of GRC and related cyber governance tooling.
• Drive greater automation and standardisation across cyber risk, compliance and reporting.
• Ensure the framework evolves with the threat landscape, regulation, audit findings and changing business priorities.
• Promote greater consistency and maturity across the Group while recognising the needs of different entities.
• Identify opportunities to improve control effectiveness, risk visibility and the quality of cyber reporting.

Connaissances

Cyber risk governance

Stakeholder influence

GRC expertise

Regulatory compliance

English fluency

Outils

GRC tooling

Regulatory reporting tooling

Description du poste

Bnode is seeking a senior Cyber Risk & Control Architect (Director level) to shape governance across its international organisation. You will define the Group Cyber Risk & Control Framework, translate threats into risks and controls, and lead reporting to senior management and the Board. Fluency in English is essential; Dutch and/or French is a plus.

This role offers strategic influence and broad exposure. You will work with the Group CISO Office, drive risk visibility, and advance automation