Domain Lead - Transformation & Cybersecurity Strategy Adoption | Brussel / Bruxelles

NMBS; Brussel; Remote; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Remote werk

Flexibele werktijden

35 verlof dagen

Bedrijfswagen

Openbaar vervoer ticket

Target bonus

Verzekeringspakket

Maaltijdcheques

Eco-cheques

Internet- en thuiswerkvergoeding

Job summary

NMBS zoekt een Domain Lead – Transformatie & Cybersecurity Strategie Adoptie om cybersecurity in de organisatie te verankeren en adoptie te sturen. U werkt nauw samen met CISO GRC, HR en leiderschap om beleid te ontwikkelen en implementeren.

U leidt de verandermanagement-werkstroom, vertaalt strategie naar concrete richtlijnen en bewaakt KPIs. Ervaring in gereguleerde omgevingen is gewenst en u draagt bij aan een cultuur van security by design.

Qualifications

• Mastergraad in Business Administration of gelijkwaardig.
• Minimaal 5 jaar ervaring met veranderprogramma’s of organisatie-transformatie.
• Sterke kennis van organisatie-structuren en effectiviteit.

Responsibilities

• Formuleer en implementeer cybersecurity-beleid in samenwerking met CISO GRC Team en HR.
• Beheer de verandermanagement-track over alle cybersecurity-projecten; zorg voor adoptie en meetbare resultaten.
• Vertaal cybersecuritystrategie naar praktische, rol-specifieke richtlijnen voor business units en teams.
• Volg adoptie, volwassenheid en KPI’s; rapporteer aan het Executive Leadership en pas aanpak aan.
• Zorg voor afstemming van transformatieprogramma’s met risicobeheer en governance.

Skills

Policy schrijven

Verandermanagement

Stakeholderbetrokkenheid

Communicatie

Change adoption

Education

Master in Business Administration

Tools

Leadership tools

Job description

Ypto zoekt nieuwe collega's, Wil jij onze teams versterken? Ontdek de vacature hieronder en solliciteer.

How do you help make a difference?

As a Domain Lead - Transformation & Cybersecurity Strategy Adoption, the primary objective is to drive real, lasting change across SNCB/NMBS by embedding cybersecurity into the organization’s culture, processes, and ways of working. This person will not merely advise; they will co-own the preparation and implementation of security policies, working hand-in-hand with HR Industrial Relations, HR Talent, Senior Leadership, and Management Teams to make change happen. They will lead the change management track across all cybersecurity projects, ensuring adoption is structured, measurable, and sustained.

What is your role at Ypto?

As a Domain Lead – Transformation & Cybersecurity Strategy Adoption you will take on the following responsibilities:

• You prepare, co-author and implement cybersecurity policies in close collaboration with CISO GRC Team, operational departments, HR Industrial Relations and HR Talent, ensuring policies are legally sound, people-centred and operationally enforceable.
• You own and drive the change management track across all cybersecurity projects from awareness and communication campaigns to training roll-outs, resistance management, and adoption monitoring.
• You translate cybersecurity strategy into concrete, role-specific guidance that business units and project teams can actually act upon, reducing friction and building organisational security capability.
• You track adoption, maturity progress and strategic KPIs across all cybersecurity projects, reporting transparently to Executive Leadership and adapting the change approach based on evidence.
• You ensure transformation programs align with risk appetite, governance frameworks, and industrial relations requirements, coordinating with HR on any policy changes that affect employment conditions or collective agreements.

To succeed in this role, the candidate must demonstrate the ability to:

• Rewrite, operationalize and actively implement cybersecurity policies — negotiating content and timing with HR Industrial Relations, securing endorsement from HR Talent for workforce capability impacts, and driving sign-off through Executive Leadership.
• Lead structured stakeholder engagement with Management Teams, HR Industrial Relations and HR Talent with a focus on building coalitions for change, handling resistance, and keeping senior sponsors actively engaged in every cybersecurity project.
• Translate complex cybersecurity requirements into practical, role-specific guidance that employees and managers can apply in their daily work, reducing friction between security and operations.
• Manage the change management workstream within each cybersecurity project as a structured discipline: stakeholder analysis, impact assessment, readiness tracking, communication planning, and benefits realisation.

Why is this job a good fit for you?

You hold a Master’s Degree in Business Administration or a related field — or equivalent demonstrated experience in organisational change and stakeholder engagement.

In addition, you have at least 5 years of experience leading change management programmes or organisational transformation initiatives, ideally in a regulated or complex multi-stakeholder environment which evidences good knowledge of organisational structures and organisational effectiveness.

You also bring these key competencies:

• You write with precision and concision — able to produce clear policy documents, executive briefings, stakeholder communications and project reports that non-technical audiences can act on
• You speak these languages: English (C1) - French (C2) - Dutch (C2)

Candidate must pass an additional work-related assessment/case study as a potential means of additional evaluation.

Why is this job a good fit for you?

Diversity Statement

Everyone is unique. That's why we believe it’s important that you can be yourself — it makes SNCB stronger. We therefore place great value on diversity and inclusion.

Whay can you expect from us?

Within our open corporate culture, you contribute to the digital transformation of SNCB/NMBS. You will have a job with social impact and ample opportunity to make your own contribution. In addition to a good work-life balance and a competitive salary, you will receive the following benefits:

• The possibility to work remotely + flexible working hours.
• 35 days of leave.
• A company car + a public transport season ticket.
• A target bonus.
• A comprehensive insurance package (affiliation without own contribution, excl. outpatient costs for family members):
• Hospitalisation and dental care for the whole family.
• Outpatient costs (= medical costs separate from hospitalisation).
• Group insurance: supplementary pension, work disability and death (cafeteria plan).
• Accidents at work (extralegal).
• Meal vouchers and eco-vouchers.
• Net allowances for remote working and carwash + internet budget.

Where will you be working?

You will work near Brussels-South station.

What’s next?

1. We take a close look at your CV and check whether it matches the profile you are looking for. We may call you briefly to ask about your motivation and experience.
2. We invite you for a first (online) HR interview where you can demonstrate your motivation, experience and expectations. In preparation, we will ask you to complete an online personality questionnaire.
3. If the first interview is positive, we invite you for a second technical interview in Brussels. This interview will be with the team, where we’ll discuss the role and how your skills align with the team’s needs.
4. If everything goes well, we will make you a contract offer.
5. You start your new job!

We reserve the right to adjust or pause this procedure if necessary. Our recruitment team will select the profiles that best match the job requirements to ensure an optimal fit.