Domain Lead – Transformation & Cybersecurity Strategy Adoption

Ypto; Brussel Hoofdstad; Hybride; EUR 120 000 - 150 000; Plein temps

Avantages offerts par ce poste

Remote work option

Flexible working hours

35 days annual leave

Company car + public transport ticket

Target bonus

Insurance package (family coverage)

Résumé du poste

SNCB/NMBS is seeking a Domain Lead - Transformation & Cybersecurity Strategy Adoption to drive lasting change by embedding cybersecurity into culture, processes, and ways of working. You will co-own policy preparation and implementation, collaborating with HR, senior leadership and management to ensure structured adoption.

You will lead change management across all cybersecurity projects, translating strategy into practical guidance, monitoring adoption, and reporting progress to executives.

Qualifications

• Masters-level expertise in organisational change and stakeholder engagement.
• Ability to translate cybersecurity requirements into practical guidance for diverse teams.
• Experience negotiating with HR and leadership to drive policy adoption.

Responsabilités

• Prepare, co-author and implement cybersecurity policies with cross-functional teams.
• Lead change management across cybersecurity projects from awareness to adoption monitoring.
• Translate strategy into role-specific guidance to reduce friction between security and operations.
• Track adoption and KPIs; report to Executive Leadership and adapt approaches based on evidence.
• Coordinate with HR on policy changes affecting employment conditions.

Connaissances

Change management

Stakeholder engagement

Policy drafting

Policy implementation

Multistakeholder coordination

Written communications

English (C1)

French (C2)

Dutch (C2)

Formation

Master's Degree in Business Administration

Description du poste

How do you help make a difference?

As a Domain Lead - Transformation & Cybersecurity Strategy Adoption, the primary objective is to drive real, lasting change across SNCB/NMBS by embedding cybersecurity into the organization’s culture, processes, and ways of working. This person will not merely advise; they will co-own the preparation and implementation of security policies, working hand-in-hand with HR Industrial Relations, HR Talent, Senior Leadership, and Management Teams to make change happen. They will lead the change management track across all cybersecurity projects, ensuring adoption is structured, measurable, and sustained.

What is your role at SNCB?

As aDomain Lead – Transformation & Cybersecurity Strategy Adoption you will take on the following responsibilities:

• You prepare, co-author and implement cybersecurity policies in close collaboration with CISO GRC Team, Operational departments, HR Industrial Relations and HR Talent, ensuring policies are legally sound, people-centred and operationally enforceable.
• You own and drive the change management track across all cybersecurity projects from awareness and communication campaigns to training roll-outs, resistance management, and adoption monitoring.
• You translate cybersecurity strategy into concrete, role-specific guidance that business units and project teams can actually act upon, reducing friction and building organisational security capability.
• You track adoption, maturity progress and strategic KPIs across all cybersecurity projects, reporting transparently to Executive Leadership and adapting the change approach based on evidence.
• You ensure transformation programs align with risk appetite, governance frameworks, and industrial relations requirements, coordinating with HR on any policy changes that affect employment conditions or collective agreements.

To succeed in this role, the candidate must demonstrate the ability to:

• Rewrite, operationalize and actively implement cybersecurity policies — negotiating content and timing with HR Industrial Relations, securing endorsement from HR Talent for workforce capability impacts, and driving sign-off through Executive Leadership.
• Lead structured stakeholder engagement with Management Teams, HR Industrial Relations and HR Talent with a focus on building coalitions for change, handling resistance, and keeping senior sponsors actively engaged in every cybersecurity project.
• Translate complex cybersecurity requirements into practical, role‑specific guidance that employees and managers can apply in their daily work, reducing friction between security and operations.
• Manage the change management workstream within each cybersecurity project as a structured discipline: stakeholder analysis, impact assessment, readiness tracking, communication planning, and benefits realisation.

Why is this job a good fit for you?

You hold a Master’s Degree in Business Administration or a related field — or equivalent demonstrated experience in organisational change and stakeholder engagement.

In addition, you have at least 5 years of experience leading change management programmes or organisational transformation initiatives, ideally in a regulated or complex multi‑stakeholder environment which evidences good knowledge of organisational structures and organisational effectiveness.

You also bring these key competencies:

• You write with precision and concision — able to produce clear policy documents, executive briefings, stakeholder communications and project reports that non‑technical audiences can act on.

• You speak these languages: English (C1) - French (C2) - Dutch (C2)

Candidate must pass an additional work‑related assessment/case study as a potential means of additional evaluation.

Everyone is unique.That'swhy we believeit’simportant that you can be yourself — it makes SNCB/NMBS stronger. We therefore placegreat valueon diversity and inclusion.

What can you expect from us?

Within our open corporate culture, you contribute to the digital transformation of SNCB/NMBS. You will have a job with social impact and ample opportunity to make your own contribution. In addition to a good work-life balance and a competitive salary, you will receive the following benefits:

• the possibility to work remotely + flexible working hours;
• 35 days of leave;
• a company car + a public transport season ticket;
• a target bonus;
• a comprehensive insurance package (affiliation without own contribution, excl. outpatient costs for family members);
  • hospitalisation and dental care for the whole family;
  • outpatient costs (= medical costs separate from hospitalisation);
  • group insurance: supplementary pension, work disability and death (cafeteria plan);
  • accidents at work (extralegal);
• meal vouchers and eco-vouchers;
• net allowances for remote working and carwash + internet budget.

Where will you be working?

You will work near Brussels-South station.

Do you have any further questions?

Mail: [e-mail]