IT & Cyber Risk Specialist

BNP Paribas Fortis; Brussel; On-site; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Meal vouchers

Insurance

Holidays

Salary conversion options

Job summary

BNP Paribas Fortis is seeking an IT Cyber Risk Manager to join the Centre of Expertise Security (CoE Security). You will act as the critical link between technical risks, business priorities, and strategic decisions, ensuring IT and cyber risks are proactively identified and translated into actionable strategies aligned with the bank’s objectives.

You will engage diverse stakeholders, drive risk intelligence, and provide targeted recommendations to IT, Cyber Security, and management,

Qualifications

• Risk-to-Solution mindset translates IT and cybersecurity challenges into actionable leadership insights.
• Strong understanding of BNP Paribas Fortis businesses and strategic goals.
• Hands-on experience in IT infrastructure, architecture, and security; translate risks into practical controls.

Responsibilities

• Identify, analyze, and translate IT and cybersecurity risks into actionable strategies.
• Collaborate with IT, business units and leadership to align risk posture with bank objectives.
• Advise on risk mitigations, ensuring continuity and security while enabling business goals.

Skills

Risk-to-Solution Mindset

Technical + Risk Expertise

Multilingual Communication

Bank-Specific Acumen

Practical Framework Application

Certifications & Methodologies

Job description

Ready to Shape the Future of Cybersecurity in Banking?

At the heart of BNP Paribas Fortis, the Centre of Expertise Security (CoE Security) drives innovation in secure solutions, designing, implementing, and maintaining trusted, cutting‑edge protections for our teams and clients.

As an IT Cyber Risk Manager, you will operate at the core of our cybersecurity strategy, connecting, influencing, and collaborating across the entire bank. Within our ‘Governance, Risk and Compliance (GRC)’ team, you will work closely with IT and Business Units to redefine Operational Risk Management, with a sharp focus on IT and Cyber Security.

This is not just a risk management role - it’s an opportunity to:

• Engage diverse stakeholders, from technical teams to C‑level executives, across all areas of BNP Paribas Fortis.
• Drive creative solutions, transforming complex cyber risks into practical, forward‑thinking strategies.
• Shape a resilient future by proactively managing cyber risks to strengthen the bank’s defenses.

If you thrive in a dynamic, cross‑functional environment where innovation and collaboration are key, this is your chance to make a tangible impact in banking cybersecurity

And in detail

Your Key Role as IT & Cyber Risk Specialist :

You serve as the critical link between technical risks, business priorities, and strategic decisions, ensuring IT and cybersecurity risks are proactively identified, analyzed, and translated into actionable strategies—fully aligned with the bank’s objectives.

Why this role stands out:

• Cross‑functional collaboration: Partner with Tribes, Functions, and Business Units, clearly articulating risks to both technical teams and leadership—enabling data‑driven decision‑making.
• Proactive risk intelligence: From Shadow IT exposures to operational vulnerabilities, you assess, prioritize, and drive mitigation, delivering practical solutions that balance security with business continuity.
• Strategic advisory: Provide targeted recommendations to IT and business stakeholders, ensuring risks are managed without compromising operational goals.
• Enterprise‑wide alignment: Report risks, trends, and insights to Cyber Security, IT, and Business Management, while sharing best practices across the BNP Paribas Group—reinforcing a unified risk posture.
• Process optimization: Leverage your expertise to refine risk management methods and tools, ensuring they remain efficient, scalable, and future‑ready.

Your talents and skills

• Risk‑to‑Solution Mindset: You break down complex IT and cybersecurity challenges, turning them into clear, actionable insights for leadership—viewing risks as solvable challenges, not just warnings.
• Bank‑Specific Acumen: Deep understanding of BNP Paribas Fortis’ businesses, functions, and strategic goals, ensuring risk management aligns with our priorities.
• Technical + Risk Expertise: Hands‑on experience in IT infrastructure, architecture, and security, blending technical knowledge with risk awareness to design practical solutions—not just identify risks.
• Multilingual Communication: Fluent in French or Dutch + professional English, with strong written and verbal persuasion skills. You adapt seamlessly between IT, business, and management discussions.
• Practical Framework Application: Proven ability to operationalize IT processes, Cyber Security Management Systems, and control frameworks—ensuring they deliver in practice.
• Certifications & Methodologies: CISSP, CISM, Operational Risk Management, or Agile experience are a plus, but not mandatory.

What we have to offer

A permanent contract and an attractive pay package.

In addition to your remuneration and benefits (meal vouchers, insurance, holidays), we offer flexible salary options, allowing you to convert part of your salary into personalised benefits (phone use, IT equipment, transport, etc.).

Our impact

As a company, we implement concrete and sustainable solutions to reduce our environmental footprint, such as saving paper and resources, recycling our waste, encouraging the use of green transport, buildings that are designed and managed to limit our impact, etc.

The departments that make up BNP Paribas cover a wide range of activities. You will therefore have many opportunities for “horizontal” and “vertical” career development.

Let's share our values

At BNP Paribas Fortis, we surround ourselves with talented individuals, regardless of their gender or gender identity, age, origin, sexual orientation, disability… And to ensure equal opportunities for everyone, regardless of their personal or family obligations, our full‑time job offers are also open to part‑time, at 80 or 90%.

If the function is categorized as a banking services provider function (cf. Law of 22 April 2019 establishing an oath and a disciplinary regime for the banking sector), you will also need to provide us with a 'certificate of absence of professional ban' from the FSMA confirming that you are not professionally disqualified.

Good luck!

If this role does not meet your expectations or fit your profile, feel free to share it with your network.