Risk Officer

Huxley; Herstal; Sur place; EUR 90 000 - 120 000; Plein temps

Résumé du poste

Huxley is seeking a Cybersecurity Risk Management Lead for a client in the defense sector to strengthen governance and risk management across the organization. You will define and mature the risk management framework, conduct cyber risk assessments (ISO27005/EBIOS), and report to executives while coordinating with SOC, IAM/PAM, and resilience teams.

The role requires French native and professional English; onsite four days per week, and offers a broad, mission-critical opportunity to shape

Qualifications

• Defining and continuously improving the Cybersecurity Risk Management framework.
• Conducting cyber risk assessments and maintaining risk registers (ISO27005 / EBIOS).
• Supporting cybersecurity governance, policies, standards, and reporting.
• Monitoring risk treatment plans and driving remediation initiatives.
• Developing KPIs, KRIs, dashboards, and executive-level reporting.
• Ensuring cybersecurity risks are appropriately considered within projects, operations, and business decisions.
• Contributing to the organization's cybersecurity maturity roadmap.
• Coordinating with the SOC to ensure incidents, trends, and threat intelligence are integrated into risk management processes.
• Supporting the governance and evolution of IAM and PAM models.
• Contributing to third-party and supply-chain security assessments.
• Participating in resilience, crisis management, and business continuity initiatives.
• Acting as a bridge between cybersecurity, IT, engineering teams, and business stakeholders.

Responsabilités

• Define and continuously improve the Cybersecurity Risk Management framework.
• Conduct cyber risk assessments and maintain risk registers.
• Support governance, policies, standards, and reporting.
• Monitor risk treatment plans and drive remediation.
• Develop KPIs, KRIs, dashboards, and executive reporting.
• Ensure cybersecurity risks are appropriately considered within projects, operations, and business decisions.
• Collaborate with SOC, IAM/PAM, resilience initiatives.

Connaissances

Cybersecurity governance

Stakeholder management

Risk assessment

ISO27005/EBIOS

SOC governance

IAM/PAM governance

Security transformation

Interpersonal skills

Description du poste

For one of our clients operating in the defense sector, we are looking for a Cybersecurity Risk Management Lead to join a growing Cybersecurity team and play a key role in strengthening the organization's security governance and risk management capabilities.

This position offers much more than a traditional GRC role. You will have the opportunity to influence the cybersecurity strategy, help mature security practices, and coordinate with multiple cybersecurity domains such as Risk Management, Security Operations, IAM/PAM governance, compliance, and resilience.

The current cybersecurity risk management maturity is still evolving, making this a unique opportunity for someone who enjoys building, structuring, and driving meaningful change while working closely with both technical teams and business stakeholders.

Your Role

As Cybersecurity Risk Management Lead, you will act as a trusted partner across the organization and contribute to the establishment of a strong security governance culture.

Your responsibilities will include:

• Defining and continuously improving the Cybersecurity Risk Management framework.
• Conducting cyber risk assessments and maintaining risk registers (ISO27005 / EBIOS).
• Supporting cybersecurity governance, policies, standards, and reporting.
• Monitoring risk treatment plans and driving remediation initiatives.
• Developing KPIs, KRIs, dashboards, and executive-level reporting.
• Ensuring cybersecurity risks are appropriately considered within projects, operations, and business decisions.
• Contributing to the organization's cybersecurity maturity roadmap.

Beyond risk management, you will also work closely with other cybersecurity functions:

• Coordinating with the SOC to ensure incidents, trends, and threat intelligence are properly integrated into risk management processes.
• Supporting the governance and evolution of IAM and PAM models.
• Contributing to third-party and supply-chain security assessments.
• Participating in resilience, crisis management, and business continuity initiatives.
• Acting as a bridge between cybersecurity, IT, engineering teams, and business stakeholders.

The Person We're Looking For

We are looking for someone who combines solid cybersecurity governance expertise with strong interpersonal skills.

Technical knowledge is important, but equally important is the ability to collaborate, influence, and create trust within a team.

You enjoy working with people, understanding business challenges, and helping organizations move forward pragmatically rather than theoretically.

Experience with SOC governance, IAM/PAM, resilience, or security transformation programs would be a strong asset.

What Makes This Opportunity Unique?

• Opportunity to shape and mature an organization's cyber risk capability.
• Broad role covering governance, risk, security operations coordination, and identity governance.
• Exposure to a strategic and mission-critical environment.
• Collaborative cybersecurity team with strong visibility across the business.
• Human-centered culture where stakeholder engagement, collaboration, and pragmatism are valued as much as technical expertise.

Requirements

• French native (mandatory) & Professional English.
• Available 4 days/week onsite.

To find out more about Huxley please visit www.huxley.com