Risk Management Specialist

OPTIMUS IT SERVICES; Brussel; Hybrid; EUR 90,000 - 130,000; Full time

Job summary

OPTIMUS IT SERVICES seeks an experienced IT Risk and Governance Lead to own risk management across technology, security and AI initiatives. You will translate audit findings into remediation plans and coordinate across Tribes, Squads and delivery teams.

You will drive risk governance, report on risk posture to leadership, and support regulatory reviews. Fluency in English and French or Dutch is required, with 50% onsite in Brussels.

Qualifications

• Minimum 5 years of experience in IT Risk, Operational Risk, Cybersecurity, Technology Governance or Technology Transformation.
• Strong experience in Operational Risk, IT Risk and Cyber Risk Management.
• Proven experience translating audit findings and risk assessments into actionable remediation plans.
• Experience managing complex remediation programs across multiple stakeholders.
• Experience working with Agile organizations, including Tribes, Squads and Chapters.
• Strong understanding of software delivery, DevSecOps, cloud, SaaS and enterprise platforms.
• Knowledge of security frameworks, control environments, change/release management and operational governance.
• Strong knowledge of risk management frameworks and control methodologies.
• Experience in large, complex organizations and cross-functional transformation initiatives.
• Strong executive reporting, presentation, workshop facilitation and stakeholder influencing skills.
• Fluent English and knowledge of French or Dutch.

Responsibilities

• Own the end-to-end lifecycle of technology, operational, cyber and AI-related risks from identification to closure.
• Analyse and challenge audit findings, risk assessments and security/architecture reviews.
• Transform risk findings into structured remediation programs, mitigation actions and delivery plans.
• Define remediation roadmaps with Architects, Security, Product Owners and Delivery teams.
• Coordinate risk reduction initiatives across multiple squads and stakeholders.
• Monitor remediation progress, dependencies, residual risks and target dates.
• Facilitate quarterly risk reviews and report risk posture and remediation progress to Tribe leadership.
• Support audits, regulatory reviews and continuous improvement of risk governance.
• Act as the Tribe's Single Point of Contact for risk governance activities.

Skills

IT Risk

Operational Risk

Cybersecurity

Technology Governance

Remediation planning

Audit findings translation

Agile methodologies

Education

Bachelor/Master degree in IT, Engineering, Cybersecurity, Risk Management

Job description

• Own the end-to-end lifecycle of technology, operational, cyber and AI-related risks from identification to closure.
• Analyse and challenge audit findings, risk assessments and security/architecture reviews.
• Transform risk findings into structured remediation programs, mitigation actions, backlog items and delivery plans.
• Define remediation roadmaps with Architects, Security, Product Owners and Delivery teams.
• Coordinate risk reduction initiatives across multiple squads and stakeholders.
• Monitor remediation progress, dependencies, residual risks and target dates.
• Facilitate quarterly risk reviews and report risk posture, remediation progress and risk reduction to Tribe leadership.
• Support audits, regulatory reviews, control assessments and continuous improvement of risk governance.
• Act as the Tribe's Single Point of Contact for risk governance activities.

Experience Required

• Minimum 5 years of experience in IT Risk, Operational Risk, Cybersecurity, Technology Governance or Technology Transformation.
• Strong experience in Operational Risk, IT Risk and Cyber Risk Management.
• Proven experience translating audit findings and risk assessments into actionable remediation plans.
• Experience managing complex remediation programs across multiple stakeholders.
• Experience working with Agile organizations, including Tribes, Squads and Chapters.
• Strong understanding of software delivery, DevSecOps, cloud, SaaS and enterprise platforms.
• Knowledge of security frameworks, control environments, change/release management and operational governance.
• Strong knowledge of risk management frameworks and control methodologies.
• Experience in large, complex organizations and cross-functional transformation initiatives.
• Strong executive reporting, presentation, workshop facilitation and stakeholder influencing skills.
• Bachelor/Master degree in IT, Engineering, Cybersecurity, Risk Management or equivalent experience.
• Fluent English and knowledge of French or Dutch.
• 50% onsite and 50% homeworking in Brussels.
• AI Governance, Model Risk, Responsible AI, NIST AI RMF, EU AI Act and financial services experience are assets.