Senior IT & Cyber Third-Party Risk Consultant

Keystone Solutions; Brussel; Hybrid; EUR 90,000 - 150,000; Full time

Job summary

Keystone Solutions is seeking an experienced IT and Cyber Third Party Risk Assessor to join client engagements in Brussels. You will lead risk assessments, review cloud security, and negotiate contractual cyber clauses, coordinating with procurement, legal and business teams to embed robust controls.

The role requires 10+ years in IT security/risk, fluency in French (with Dutch and English), and proven ability to deliver risk insights to management in a multicultural environment.

Qualifications

• Master degree in IT, cybersecurity, or risk management.
• 10+ years in IT and cyber risk management with third-party focus.
• Fluent in French; Dutch and English required.
• Strong analytical and stakeholder engagement skills.
• Experience in cloud security and contract risk in financial services environments.

Responsibilities

• Conduct IT and cyber risk assessments of third-party suppliers.
• Review cloud solutions with focus on security, data protection and resilience.
• Inspect audit reports and track remediation with suppliers.
• Negotiate IT and cybersecurity clauses in supplier contracts.
• Lead ICT risk committees and develop risk dashboards for senior management.
• Coordinate with procurement, legal and business teams to embed risk controls.

Skills

IT risk assessment

Third-party risk

Cloud security

Contract risk management

GRC tools (ServiceNow)

ISO 27001 / SOC / NIST

Stakeholder influencing

Audit & risk reporting

Education

Master degree in IT / Cybersecurity / Risk Management

Tools

ServiceNow

Audit methodologies (ISO27001, SOC 2, NIST)

Job description

Keystone Solutions is seeking an experienced IT and Cyber Third Party Risk Assessor to join client engagements in Brussels. You will lead risk assessments, review cloud security, and negotiate contractual cyber clauses, coordinating with procurement, legal and business teams to embed robust controls.

The role requires 10+ years in IT security/risk, fluency in French (with Dutch and English), and proven ability to deliver risk insights to management in a multicultural environment.