Tribe Risk Officer Artificial Intelligence Consultant

Keystone Solutions; Brussel Hoofdstad; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

On-site consulting

Career growth

Diverse client projects

Broad exposure

Job summary

Keystone Solutions seeks a Tribe Risk Officer to lead end-to-end risk management for AI projects on client sites in Brussels. You will translate audits into executable remediation, coordinate across squads, and drive governance and reporting with senior stakeholders.

Role requires 5+ years in IT/Operational risk, strong governance and compliance knowledge, and experience with risk remediation in Agile environments. 50% on-site and 50% homeworking is expected, with Brussels-based travel.

Qualifications

• Minimum 5 years of experience in IT Risk, Operational Risk, Cybersecurity, Technology Governance, or Technology Transformation.
• Demonstrated experience managing complex remediation programs across multiple stakeholders.
• Experience in translating audit findings and risk assessments into actionable delivery plans.

Responsibilities

• Own the end-to-end lifecycle of risks from identification to closure.
• Review existing risk inventories and transform fragmented findings into structured remediation programs.
• Translate risk statements into concrete implementation actions, backlog items, epics, and delivery plans.
• Define target operating models and mitigation roadmaps together with architects and delivery teams.
• Ensure risks are properly assessed, prioritized, and documented.
• Challenge remediation proposals to ensure they address root causes and not only symptoms.
• Coordinate risk reduction initiatives across multiple squads and stakeholders.
• Facilitate regular risk review sessions with Tribe leadership.
• Maintain a consolidated view of risk exposure, mitigation progress, and residual risks.
• Prepare management reporting and executive-level summaries.
• Support audits, regulatory reviews, and control assessments.
• Build trusted relationships with Product Owners, Architects, Delivery Leads, Security Officers, and Business representatives.
• Contribute to the continuous improvement of risk management frameworks, tooling, and reporting.
• Support the implementation of AI governance, operational resilience, and regulatory compliance requirements where applicable.
• Act as the Tribe’s Single Point of Contact for risk governance activities.

Skills

Risk management

Stakeholder management

Regulatory compliance

Audit remediation

Cloud security

Education

CRISC

CISA

CISSP

ISO27001 Lead Implementer/Lead Auditor

PMP, Prince2 or Agile certification

ITIL Foundation

Job description

Mission Overview

The Tribe Risk Officer - Artificial Intelligence is a consultancy mission at the client site, representing Keystone Solutions. As a Keystone Solutions consultant, you will be hired to work on client projects, delivering expertise and value in risk management within an AI-driven environment.

Mission Context

The Tribe Risk Officer supports the AI Tribe in identifying, structuring, prioritizing, and mitigating technology, operational, regulatory, and AI-related risks. The primary mission is to transform risk observations, findings, and recommendations into executable mitigation plans that can be implemented, monitored, and governed through the Tribe's delivery processes. The Tribe Risk Officer acts as the bridge between Risk Management, Information Security, Architecture, Delivery Management, and Business stakeholders, ensuring that risks are translated into realistic, prioritized, and measurable implementation roadmaps.

Responsibilities

• Analyze and challenge risk findings raised by Internal Audit, Information Security, Risk Management, Architecture reviews, and external assessments.
• Consolidate and restructure risk observations into coherent risk themes, remediation streams, and implementation plans.
• Define practical mitigation actions and ensure alignment with architecture, security, operational, and regulatory requirements.
• Coordinate with squads, architects, product owners, and tribe leadership to secure execution of remediation activities.
• Monitor implementation progress, dependencies, residual risks, and target dates.
• Report overall risk posture, remediation status, and risk reduction achievements to Tribe management and governance bodies.
• Contribute to the development of a sustainable risk management culture across the Tribe.
• Organise quarterly risk evaluation meetings to track progress on audits and risk closure.

Function Description

• Own the end-to-end lifecycle of risks from identification to closure.
• Review existing risk inventories and transform fragmented findings into structured remediation programs.
• Translate risk statements into concrete implementation actions, backlog items, epics, and delivery plans.
• Define target operating models and mitigation roadmaps together with architects and delivery teams.
• Ensure risks are properly assessed, prioritized, and documented.
• Challenge remediation proposals to ensure they address root causes and not only symptoms.
• Coordinate risk reduction initiatives across multiple squads and stakeholders.
• Facilitate regular risk review sessions with Tribe leadership.
• Maintain a consolidated view of risk exposure, mitigation progress, and residual risks.
• Prepare management reporting and executive-level summaries.
• Support audits, regulatory reviews, and control assessments.
• Build trusted relationships with Product Owners, Architects, Delivery Leads, Security Officers, and Business representatives.
• Contribute to the continuous improvement of risk management frameworks, tooling, and reporting.
• Support the implementation of AI governance, operational resilience, and regulatory compliance requirements where applicable.
• Act as the Tribe’s Single Point of Contact for risk governance activities.

Education

Bachelor or Master degree in Information Technology, Engineering, Cybersecurity, Risk Management, or equivalent through experience.

Certification

• CRISC
• CISA
• CISSP
• ISO27001 Lead Implementer / Lead Auditor
• PMP, Prince2 or Agile certification
• ITIL Foundation

Languages

French and Dutch: Knowledge of either is a plus.

English: Fluent, good, or not required.

Travel

Primarily Brussels-based with occasional travel within group entities.

Telework

Expectation: 50% on site & 50% homeworking.

Required Knowledge / Experience

• Minimum 5 years of experience in IT Risk, Operational Risk, Cybersecurity, Technology Governance, or Technology Transformation.
• Demonstrated experience managing complex remediation programs across multiple stakeholders.
• Experience in translating audit findings and risk assessments into actionable delivery plans.

Technical Experience

• Strong experience in Operational Risk, IT Risk, and Cyber Risk Management.
• Experience with risk remediation planning and implementation governance.
• Experience working with Agile organizations (Tribes, Squads, Chapters).
• Strong understanding of software delivery, DevSecOps, and cloud environments.
• Experience with SaaS platforms, public cloud, and enterprise platforms.
• Knowledge of security frameworks and control environments.
• Experience in change management, release management, and operational governance.
• Experience working with multi-disciplinary teams including Architecture, Security, and Delivery.
• Strong reporting and executive communication skills.

Preferable

• Experience in AI Governance, Model Risk Management, or Responsible AI practices.
• Familiarity with NIST AI RMF, EU AI Act, or emerging AI governance frameworks.
• Knowledge of financial sector regulatory environments.

Business Experience

• Strong knowledge of risk management frameworks and control methodologies.
• Experience in large and complex organizations.
• Experience managing cross-functional transformation initiatives.
• Experience leading workshops and facilitating stakeholder alignment.
• Experience preparing and presenting executive-level reporting.
• Ability to challenge stakeholders constructively and influence decision-making.

Preferable

• Experience within banking, insurance, or financial services.
• Experience with regulatory inspections, internal audits, or supervisory reviews.

Soft Skills

• Strong analytical and problem-solving capabilities.
• Ability to structure ambiguity into actionable plans.
• Excellent communication and influencing skills.
• Strong stakeholder management capabilities.
• Strong organizational and planning skills.
• Ability to work independently while driving collaboration across teams.
• Results-oriented and execution-focused mindset.
• Excellent presentation and reporting skills.
• Ability to challenge constructively and facilitate consensus.
• Strong writing skills, capable of producing concise executive documentation.
• Comfortable operating in a fast-moving and complex environment.
• Strong sense of ownership and accountability.
• Ability to mentor and coach teams on risk management practices.

Keystone Solutions Advantages

• As a consultant, you will work on-site, embodying the Keystone Solutions identity and values in every engagement.
• Experience dynamic projects and diverse challenges across various client environments.
• Accelerate your professional development with turbo-charged learning and broad exposure to industry best practices.
• Skyrocket your ambition with a clear commitment to career growth within the Keystone Solutions framework.
• Being a “K-Stone” means bringing core values—integrity, excellence, and collaboration to every mission.