Senior AI IT Risk, Compliance & Operational Resilience

Rhox; Brussel; On-site; EUR 90,000 - 130,000; Full time

Job summary

Rhox, a Belgian insurance organisation, is expanding its AI-enabled IT risk and governance framework across cloud, AI, and process automation. The Senior AI IT Risk, Compliance & Operational Resilience Consultant will assess AI models, data, LLMs, and third-party AI services against the European AI Act and related controls.

The role spans IT, cybersecurity, data, and digital teams, delivering risk registers, remediation tracking, supplier oversight, and executive dashboards during a 12-month

Qualifications

• At least 10 years of senior IT risk and governance experience.
• Experience in financial or insurance sectors with regulatory context.
• Knowledge of AI models, data, LLMs, and third-party AI services.

Responsibilities

• Strengthen ICT and AI risk management framework with governance controls.
• Lead AI solution risk assessments and document risks in risk registers.
• Define and monitor remediation and control-strengthening plans with stakeholders.
• Evaluate AI models, data, LLMs, cloud services, and third-party providers for resilience and security.
• Build risk indicators and executive dashboards for AI/ICT risk.
• Prepare opinions and evidence for audits and regulatory inspections.

Skills

IT risk governance

Senior IT risk experience

AI/Generative AI understanding

Regulatory knowledge (AI Act, DORA,GD

Operational resilience

Stakeholder communication

Risk assessment leadership

Tools

Microsoft Word

Microsoft Excel

PowerPoint

Job description

A Belgian insurance organisation is extending its AI-enabled IT model across cloud solutions, generative AI, and IT process automation. The Senior AI IT Risk, Compliance & Operational Resilience Consultant will act as an AI risk consultant, strengthening AI risk management and operational resilience while working with IT, architecture, cybersecurity, data, and digital teams to assess AI models, LLMs, training data, and third-party AI services against the European AI Act and related controls.

The mission

The organisation is integrating AI adoption into a broader ICT risk and governance framework covering cloud environments, outsourced services, critical suppliers, and automated IT processes. The work connects the European AI Act, DORA, GDPR, the Cyber Resilience Act, cybersecurity, fraud prevention, and National Bank of Belgium expectations, so that AI solutions are assessed through operational, regulatory, contractual, and resilience lenses. The programme includes an AI Governance Framework, risk registers, regulatory impact assessments, and executive monitoring dashboards.

You will work across IT, Application Technologies and Architecture, Cybersecurity, Data, Digital Technologies, and AI teams. Your scope will run from Business Risk Assessments and risk identification through remediation tracking, control strengthening, supplier oversight, and audit or regulatory inspection support. The initial mission is planned around a 12-month transformation period, with deliverables that inform decisions on AI solutions, cloud services, exit strategies, and strategic suppliers.

Your responsibilities

• Strengthen the ICT and AI risk management framework by translating regulatory expectations into usable governance and control requirements.
• Lead risk assessments for AI solutions and technology initiatives, documenting operational, cyber, regulatory, contractual, fraud, and ICT risks in clear risk registers.
• Define and monitor remediation and control-strengthening plans with business and technology stakeholders.
• Evaluate AI models, training data, LLMs, cloud services, and third-party AI providers, including resilience, cybersecurity, outsourcing, critical-supplier, and exit-strategy considerations.
• Build risk indicators and executive dashboards that provide traceable monitoring of AI and ICT risk exposure.
• Prepare opinions, recommendations, and evidence for internal audits, external audits, and regulatory inspections.

Your profile

Essential skills

• Bring at least 10 years of senior experience in IT risk and IT governance, with a background in operational risk, compliance, audit, internal control, or risk management.
• Apply this experience in the financial or insurance sector, where regulatory obligations and third-party dependencies are material.
• Understand AI and Generative AI technologies, including risks related to AI models, training data, LLMs, and AI services provided by third parties.
• Interpret and apply the European AI Act, DORA, GDPR, and third-party management frameworks, with awareness of the Cyber Resilience Act.
• Assess operational resilience and cybersecurity challenges in AI systems, cloud environments, outsourced services, and wider ICT landscapes.
• Work effectively with IT, Architecture, Cybersecurity, Data, and Digital teams, and communicate clear risk opinions to technical and senior stakeholders.
• Use Microsoft Word, Excel, and PowerPoint to produce assessments, control plans, reporting packs, and management dashboards.

Languages

• English: C1 or above, fluent in speaking, reading, and writing.
• Dutch: approximately A2 to C1, from basic to fluent depending on the communication context.
• French: approximately A2 to C1, from basic to fluent depending on the communication context.