Information Risk Manager

EmpHire; Brussel Hoofdstad; Hybrid; EUR 90,000 - 140,000; Full time

Benefits offered by this job

Flexible hours

Work from home

Meal vouchers

Comprehensive insurance

Job summary

EmpHire seeks a Dynamic Information Risk Manager to join the IT Security team. The role focuses on identifying, assessing, and reporting security risks with emphasis on application security, SSDLC, SAST/DAST/SCA, and secure configuration.

The successful candidate will manage risk processes, advise on mitigations, and foster a strong security culture. The ideal candidate has a Bachelor’s or Master’s in a relevant field with about 5 years of information security or risk management experience,

Qualifications

• Bachelor’s or Master’s degree in a relevant field.
• At least 5 years of information security or risk management experience.
• Strong knowledge of application security and hardening standards.
• Excellent analytical, communication, and influencing skills.
• Fluent in Dutch or French; strong English proficiency.
• Team player who is independent, proactive, and enthusiastic.
• Certifications such as CISSP, CISM, CISA, CCOE are a strong asset.
• Experience in risk reporting to regulatory bodies.
• Office locations in Anderlecht and Berchem; remote work possible.

Responsibilities

• Identify, assess, monitor security risks to protect business continuity.
• Develop and maintain security policies and risk controls.
• Advise stakeholders on risk mitigation strategies.
• Prepare risk reports for management and regulators.
• Lead security projects with resource, timeline, and budget planning.
• Promote security culture through training and workshops.
• Monitor threats, incidents, and coordinate improvements.

Skills

Application security

Analytical mindset

Communication skills

Influencing stakeholders

Risk management

Team player

Proactive approach

Education

Bachelor or Master degree

Job description

Our client, a major financial institution, is looking for a Dynamic Information Risk Manager to join the IT Security team to help protect the organization by identifying, assessing, managing, and reporting security risks. This position focuses on Application Security (including SSDLC, SAST, DAST, SCA) and Secure Configuration/Hardening, from a second line of defense (risk oversight) perspective.

As an Information Security Risk Advisor, you will:

Identify, assess, analyze, and monitor potential security risks to ensure business continuity and protect organizational integrity.

Develop and maintain security policies within your domain, covering both internal and external threats.

Oversee risk management processes to ensure compliance with internal policies, standards, and regulatory requirements.

Evaluate the effectiveness of existing controls, identify gaps, and recommend improvements.

Advise internal stakeholders (1st line business units and agent network) and management on the implementation of effective risk mitigation strategies.

Analyze security incidents, ensure proper follow-up, and contribute to structural improvements.

Monitor emerging threats, trends, and vulnerabilities and assess their impact on the organization.

Document and report risks, findings, and mitigation plans; escalate unaddressed or unacceptable risks.

Prepare and deliver risk reports for internal management and regulatory bodies.

Promote a strong security culture by raising awareness through training, advice, and workshops.

Lead and participate in security-related projects, including planning resources, timelines, and budgets.

Propose enhancements to the security policy and foster a culture of risk awareness across the bank.

Requirements

A Bachelors or Master’s degree in a relevant field and preferably at least 5 years of experience in information security or risk management.

Strong knowledge of application security and hardening standards.

Analytical mindset with the ability to challenge and evaluate technical implementations.

Skilled in providing clear, audience-tailored, and constructive feedback.

Strong communication and influencing skills; capable of convincing stakeholders of risk priorities and required actions.

Fluent in Dutch or French with a solid understanding of the other national languages; professional proficiency in English.

A team player who enjoys working in multidisciplinary environments; independent, proactive, and enthusiastic.

Certifications such as CISSP, CISM, CISA, CCOE (or equivalent) are considered a strong asset.

A dynamic and supportive work environment with offices in Anderlecht and Berchem.

Opportunities for continuous learning and development through extensive training—technical, regulatory, language, and personal development.

A healthy work-life balance, including flexible hours and the possibility to work from home.

A competitive salary package with attractive fringe benefits: meal and eco vouchers, comprehensive insurance coverage, and a flexible cafeteria plan to tailor your benefits.

A permanent contract and the opportunity to grow in a future-oriented, security-conscious organization.