Senior Initiative Owner Cyber Security Strategy

Rhox; Brussel; Sur place; EUR 90 000 - 130 000; Plein temps

Résumé du poste

Rhox, a major Belgian financial institution, is strengthening its cyber security strategy for the transition to post-quantum cryptography. In the CoE Security Strategy and Delivery team, the Senior Initiative Owner will turn emerging quantum risks into a governed portfolio of initiatives, guiding roadmaps, budgets and investment decisions across the organisation.

You will own initiatives from inception to completion, set milestones, manage dependencies and risks, and translate stakeholder input

Qualifications

• Bring at least 10 years of experience managing multiple IT security projects or programmes at senior level.
• Apply information security governance frameworks and risk management practices to complex, cross-functional initiatives.
• Lead change management activities and communicate effectively with executives, technical specialists and business stakeholders.
• Understand post-quantum cryptography fundamentals, including lattice-based algorithms, hybrid encryption, NIST-selected algorithms and NIST standardization.
• Assess cryptographic exposure using cryptographic inventory and assessment methodologies, and identify systems that may be vulnerable to quantum attacks.
• Hold a project management certification such as PRINCE2 or ITIL, and a change management certification such as ADKAR.

Responsabilités

• Build long-term and short- to medium-term cyber security roadmaps with prioritised actions, budgets and investment recommendations.
• Lead security initiatives through planning, execution and closure, including post-quantum readiness assessments and mitigation plans.
• Prioritise workstreams and dependencies so that cryptographic agility and broader security objectives are reflected in project designs.
• Manage milestones, risks, issues and impediments, including vendor readiness, legacy technology constraints and cross-functional dependencies.
• Translate stakeholder input and technical analysis into clear briefings, governance materials and investment decisions for senior and executive management.
• Strengthen security policies and frameworks in line with Group requirements, regulations and evolving quantum-safe guidance.

Connaissances

IT security program mgmt

InfoSec governance

Change management

Post-quantum cryptography

Cryptographic risk assessment

PRINCE2/ITIL certs

Formation

Master's degree

Outils

CISSP

CISA

CRISC

ETSI PQC guidance

ADKAR

PRINCE2

Description du poste

A major Belgian financial institution is strengthening its cyber security strategy for the transition to post-quantum cryptography. Within its CoE Security Strategy and Delivery team, the Senior Initiative Owner will turn emerging quantum risks into a governed portfolio of initiatives, using project management, change management and information security governance to coordinate readiness assessments, roadmaps and investment decisions across the organisation.

The mission

The team defines security initiatives, enhancements and studies, then tracks their value, status, dependencies and contribution to business outcomes. The post-quantum cryptography readiness assessments cover cryptographic inventory and assessment methodologies, identification of vulnerable systems, migration sequencing, hybrid encryption and cryptographic agility. This work must align with Group standards, regulatory expectations, NIST standardization and relevant ETSI/IETF PQC guidelines. The output is a bank-wide cyber security roadmap with prioritised actions, budgets and decision material for senior management.

You will own initiatives from inception through completion, combining strategic direction with day-to-day delivery control. You will set milestones, challenge dependencies and manage risks such as vendor support, legacy constraints and the uncertain maturity of quantum-resistant solutions. The position connects security specialists, technology teams, business stakeholders and executive management, translating algorithm trade-offs into clear decisions. Your work will support a structured post-quantum transition while maintaining focus on current information security risks.

Your responsibilities

• Build long-term and short- to medium-term cyber security roadmaps with prioritised actions, budgets and investment recommendations.
• Lead security initiatives through planning, execution and closure, including post-quantum readiness assessments and mitigation plans.
• Prioritise workstreams and dependencies so that cryptographic agility and broader security objectives are reflected in project designs.
• Manage milestones, risks, issues and impediments, including vendor readiness, legacy technology constraints and cross-functional dependencies.
• Translate stakeholder input and technical analysis into clear briefings, governance materials and investment decisions for senior and executive management.
• Strengthen security policies and frameworks in line with Group requirements, regulations and evolving quantum-safe guidance.

Your profile

Essential skills

• Bring at least 10 years of experience managing multiple IT security projects or programmes at senior level.
• Apply information security governance frameworks and risk management practices to complex, cross-functional initiatives.
• Lead change management activities and communicate effectively with executives, technical specialists and business stakeholders.
• Understand post-quantum cryptography fundamentals, including lattice-based algorithms, hybrid encryption, NIST-selected algorithms and NIST standardization.
• Assess cryptographic exposure using cryptographic inventory and assessment methodologies, and identify systems that may be vulnerable to quantum attacks.
• Hold a project management certification such as PRINCE2 or ITIL, and a change management certification such as ADKAR.

Preferred skills

• CISSP, CISA or CRISC certification.
• Experience with IT transformation projects, financial services, Agile methodology or maturity and quality transformation.
• Familiarity with ETSI/IETF PQC guidelines and practical approaches to cryptographic modernization.

Languages

• French: C1 or higher, required for Group communication.
• Dutch: C1 or higher.
• English: C1 or higher.

Education

• A master's degree is mandatory for this role.