Expert IT and Cyber Risk Advisor - AI Delivery

A major Belgian bank in Brussels is looking for an Expert IT and Cyber Risk Advisor to support AI delivery programmes in identifying, structuring, prioritising and mitigating technology, operational, regulatory and AI-related risks. You transform risk observations, findings and recommendations into executable mitigation plans that can be implemented, monitored and governed through delivery processes — bridging Risk Management, Information Security, Architecture, Delivery Management and business stakeholders.

Responsibilities include: owning the end-to-end lifecycle of risks from identification to closure; reviewing risk inventories and transforming fragmented findings into structured remediation programs; translating risk statements into concrete implementation actions, backlog items, epics and delivery plans; defining target operating models and mitigation roadmaps with architects and delivery teams; ensuring risks are properly assessed, prioritised and documented; challenging remediation proposals so they address root causes, not only symptoms; coordinating risk-reduction initiatives across multiple delivery teams and stakeholders; facilitating regular risk review sessions with leadership; maintaining a consolidated view of risk exposure, mitigation progress and residual risks; preparing management reporting and executive-level summaries; supporting audits, regulatory reviews and control assessments; supporting implementation of AI governance, operational resilience and regulatory compliance where applicable; acting as the single point of contact for risk governance activities on the AI delivery programme.

Required business experience: risk management frameworks and control methodologies, large and complex organisations, cross-functional transformation initiatives, leading workshops and facilitating stakeholder alignment, preparing and presenting executive-level reporting (all mandatory); banking, insurance or financial services, and regulatory inspections, internal audits or supervisory reviews are preferable.

Functional experience: managing complex remediation programs across multiple stakeholders, and translating audit findings and risk assessments into actionable delivery plans (mandatory).

Technical experience: operational risk, IT risk and cyber risk management (≥5 years), risk remediation planning and implementation governance, agile delivery organisations, software delivery, DevSecOps and cloud environments, SaaS platforms, public cloud and enterprise platforms, security frameworks and control environments, change management, release management and operational governance (all mandatory); AI governance, model risk management or responsible AI, and NIST AI RMF, EU AI Act or emerging AI governance frameworks are preferable.

Language: English (fluent) is mandatory; Dutch and French (good) are preferable.

Education: Bachelor or Master's in IT, Engineering, Cybersecurity, Risk Management or equivalent through experience. Soft skills include strong analytical and problem-solving capabilities, ability to structure ambiguity into actionable plans, excellent communication and influencing skills, strong stakeholder management, strong organisational and planning skills, work independently while driving collaboration across teams, results-oriented and execution-focused, excellent presentation and reporting skills, challenge constructively and facilitate consensus, strong writing skills for concise executive documentation, comfortable in a fast-moving, complex environment, and a strong sense of ownership and accountability.