Embedded Security Risk Strategist

imec; Vlaams-Brabant; On-site; EUR 90,000 - 130,000; Full time

Job summary

imec, based at Leuven, Belgium, seeks an experienced Security Risk Manager to partner with business operations, translate security policy into action, and drive risk ownership with line management. You will connect central Security Office expectations with local execution and improve risk visibility.

You will leverage your 8–10 years of information security experience to guide management through risk treatment, escalation, and decision preparation in a fast-moving, high-tech environment.

Qualifications

• 8–10 years of information or cyber security, risk management or advisory experience.
• Solid understanding of security risk management frameworks and governance models.
• Ability to translate security risks, controls and requirements into clear business language.
• Experience with senior stakeholders in complex, research-driven, high-tech environments.
• Proactive, owns tasks and communicates results effectively.

Responsibilities

• Act as embedded security risk partner for assigned sectors while keeping risk ownership with line management.
• Maintain a structured security risk view including risks, mitigations and escalations.
• Support management in prioritising risk treatment, escalation and decision preparation.
• Translate corporate security policies and risk framework into practical local actions.
• Collaborate with security leads to align priorities and improvements with imec’s security roadmap.
• Prepare inputs for sector reviews and governance forums.
• Contribute to continuous improvement of imec’s first-line security risk model and network.

Skills

Security risk management

Stakeholder management

ISO 27001 / NIST

Business partnering

Communication

Analysis / critical thinking

Facilitation

Project management

Semiconductor/high-tech environment

Job description

imec, based at Leuven, Belgium, seeks an experienced Security Risk Manager to partner with business operations, translate security policy into action, and drive risk ownership with line management. You will connect central Security Office expectations with local execution and improve risk visibility.

You will leverage your 8–10 years of information security experience to guide management through risk treatment, escalation, and decision preparation in a fast-moving, high-tech environment.