Senior Director, Cyber Risk & Control Architect – GRC Lead

Bpost; Brussel Hoofdstad; Hybrid; EUR 123,000 - 190,000; Full time

Benefits offered by this job

Meal vouchers

Insurance (health, disability)

Phone subscription with data

Flexible remuneration plan

Company car / bike leasing

Mobility plan

Work from home

Flexible working hours

Extra leave days

End-of-year bonus

Access to 100+ partner benefits

Job summary

Bpost is seeking a senior Cyber Risk & Control Architect to shape our Group Cyber Risk & Control Framework and cyber governance across more than 20 entities. You will translate threats and regulatory needs into clear risks, controls and actions for executive leadership.

The role requires extensive experience in cybersecurity governance, risk management and compliance, and offers exposure to senior stakeholders, international operations and a comprehensive benefits package.

Qualifications

• Experienced cybersecurity governance, risk and compliance professional.
• Proven ability to design governance frameworks and reporting processes.
• Experience with large, international organisations and senior stakeholder engagement.
• Strong analytical and strategic thinking to translate risk into actions.

Responsibilities

• Design and evolve the Group Cyber Risk & Control Framework across 20+ entities.
• Translate threats, regulatory requirements and audit findings into risks, controls and actions.
• Support risk appetite discussions at Executive Committee and Board level.
• Develop reporting covering cyber risk, programme delivery, control effectiveness and NIS2 compliance.
• Lead selection and evolution of GRC tooling and data processes.

Skills

GRC expertise

Cyber risk management

Regulatory compliance

ISO 27001

NIS2

NIST CSF

Cyber governance

Auditing

Fluency in English

Stakeholder influence

Tools

GRC tooling

Job description

Bpost is seeking a senior Cyber Risk & Control Architect to shape our Group Cyber Risk & Control Framework and cyber governance across more than 20 entities. You will translate threats and regulatory needs into clear risks, controls and actions for executive leadership.

The role requires extensive experience in cybersecurity governance, risk management and compliance, and offers exposure to senior stakeholders, international operations and a comprehensive benefits package.