Security Governance and Risk Manager

This is a fully remote position, open to applicants in Belgium.

📋 Description

• Champion security through design and foster trust throughout the organization.

• Simplify intricate frameworks into straightforward, actionable standards.

• Ensure these standards are integrated into daily operations rather than remaining theoretical.

• Convert group security frameworks into practical policies, controls, and procedures.

• Cultivate and enhance a Security-by-Design culture across various projects, platforms, and teams.

• Provide affiliates with clear tools, training, and hands-on support to empower their progress.

• Establish and lead a structured risk management process across the organization.

• Assist teams in recognizing risks, outlining actions, and monitoring tangible progress.

• Oversee implementation, identify gaps, and deliver clear insights to senior leadership.

• Promote corrective actions and continuous enhancement across affiliates.

• Facilitate audit preparedness, ensuring that evidence and documentation remain comprehensive and accurate.

• Collaborate with IT, PMO, and business teams to ensure governance meets actual business requirements.

• Serve as a trusted advisor to leadership on risk, compliance, and security priorities.

• Learn from incidents and convert insights into more robust policies and controls.

⛳️ Requirements

• You possess a master’s degree in Information Security, IT, or a related discipline.

• You have 8–12 years of experience in information security, with a strong emphasis on governance, risk, and compliance.

• You can translate frameworks such as ISO 27001, NIST, NIS2, CIS Controls, SOC 2, or IEC 62443 into practical policies.

• You develop and enhance security maturity programs across various teams or regions.

• You comprehend risk management frameworks and implement them in complex settings.

• You support audits and understand how to maintain structured and ready evidence.

• You are familiar with modern security ecosystems, including cloud security (Azure), SIEM, SOC, CIAM, PAM, or ServiceNow.

• You have practical experience with Security-by-Design in projects and procurement.

• Certifications such as CISSP, CISM, or ISO 27001 Lead Implementer/Auditor enhance your qualifications.

• You communicate effectively, influence stakeholders, and build trust at all levels.

• You maintain a structured approach, anticipate needs, and take initiative.

• You connect individuals, challenge existing norms, and strive for improvement; that is your motivation.

🏝️ Benefits

• A pivotal role with substantial impact and visibility within an international organization.

• An opportunity to shape and fortify group-wide security standards and strategies.

• Access to a network of experts where you can connect, learn, and grow continuously.

• Flexibility in your working arrangements, respecting your work-life balance.

• A competitive salary package with additional benefits aligned with your expertise.