Risk Analyst

V-IT NV; Namen; Sur place; EUR 65 000 - 90 000; Plein temps

Résumé du poste

V-IT NV is seeking a Risk Analyst in Namur, Belgium, to assess cyber risks for industrial systems and IT dependencies, and to develop treatment plans. The role requires presence in our Namur offices and collaboration with OT and IT teams.

The ideal candidate will map assets, identify SPOFs, and translate OT risks into security requirements for suppliers and the SOC. Strong communication and proactive problem solving are essential.

Qualifications

• Experience in OT/ICS and cyber risk assessment for infrastructure.
• Knowledge of cybersecurity frameworks and information security standards.
• Ability to translate OT risks into security requirements for procurement and operation.
• Strong communication, collaboration, and proactive problem solving.

Responsabilités

• Assess, Prioritize and trace cyber risks for industrial systems and IT dependencies.
• Map OT assets and dependencies; identify SPOFs and critical interfaces.
• Develop risk treatment plans with cost/impact estimates and roadmaps.
• Draft IT/OT security clauses and check supplier compliance.
• Translate OT risks into logging requirements and SOC detection rules.
• Participate in restoration tests and exercise-driven improvements.
• Prepare OT risk summaries for governance and audit reporting.

Connaissances

Risk assessment

Cybersecurity

OT/ICS knowledge

GRC

Stakeholder management

Outils

GRC tools

Reporting tools

Description du poste

For a client in Namur, we are looking for a Risk Analyst.

Project start and end dates: 03/11/2026 - 30/11/2027

Location: Namur, with a presence required in our offices at least 60% of the time.

Required languages: English, French

Main mission:

Assess, prioritize and trace the cyber risks related to industrial systems and their IT dependencies present on public infrastructure and recommend appropriate treatment measures.

Key activities:

• Mapping & inventory: Identify OT assets and their IT dependencies. Identify the SPOFs.
• Operational risk analysis: Apply the methodology to model threats, vulnerabilities and impacts. Use concrete scenarios based on feedback.
• Treatment plan & prioritization: Develop the action implementation plan to address the risks analyzed. Quantify the cost/impact and develop a risk reduction roadmap.
• Project & Contract Integration: Draft the IT/OT security clauses in the specifications. Check the compliance of critical OT suppliers.
• IT/OT & SOC Synergy: Translate OT risks into logging requirements and detection rules for the SOC.
• Resilience & exercises: Participate in restoration tests and OT/IT table-top exercises. Contribute to feedback and continuous improvement of service continuity plans.
• Reporting & Governance: Maintain the OT risk register, prepare summaries for the Cyber Committee and for NIS2 audits.

Examples of deliverables:

• Service continuity plan and restoration plan after disaster.
• Detailed inventory of OT assets & IT dependencies.
• OT risk register with scoring, scenarios, owners, and deadlines.
• Zone & duct mapping + flow diagrams.
• Prioritized treatment plan.
• Security requirements grids for OT purchases/modernizations.
• Quarterly reports to the Coordinator.

Expected behavioral skills:

• Assertiveness and the ability to be proactive.
• Autonomy and appreciation of teamwork.
• Very good communicator, customer oriented and results.
• Positive and caring attitude, active listening.
• Capacity for pedagogy and popularization of technical aspects.
• Rigorous and methodical.

Technical skills required:

• Communication & influence.
• Knowledge of industrial communication protocols.
• Knowledge of control systems.
• Cybersecurity framework.
• Risk management methodologies.
• Information security standards and repositories.
• GRC tools & reporting.