Risk Management Specialist

Key Responsibilities

• Own the end-to-end lifecycle of technology, operational, cyber and AI-related risks from identification to closure.
• Analyse and challenge audit findings, risk assessments and security/architecture reviews.
• Transform risk findings into structured remediation programs, mitigation actions, backlog items and delivery plans.
• Define remediation roadmaps with Architects, Security, Product Owners and Delivery teams.
• Coordinate risk reduction initiatives across multiple squads and stakeholders.
• Monitor remediation progress, dependencies, residual risks and target dates.
• Facilitate quarterly risk reviews and report risk posture, remediation progress and risk reduction to Tribe leadership.
• Support audits, regulatory reviews, control assessments and continuous improvement of risk governance.
• Act as the Tribe's Single Point of Contact for risk governance activities.

Experience Required

• Minimum 5 years of experience in IT Risk, Operational Risk, Cybersecurity, Technology Governance or Technology Transformation.
• Strong experience in Operational Risk, IT Risk and Cyber Risk Management.
• Proven experience translating audit findings and risk assessments into actionable remediation plans.
• Experience managing complex remediation programs across multiple stakeholders.
• Experience working with Agile organizations, including Tribes, Squads and Chapters.
• Strong understanding of software delivery, DevSecOps, cloud, SaaS and enterprise platforms.
• Knowledge of security frameworks, control environments, change/release management and operational governance.
• Strong knowledge of risk management frameworks and control methodologies.
• Experience in large, complex organizations and cross-functional transformation initiatives.
• Strong executive reporting, presentation, workshop facilitation and stakeholder influencing skills.
• Bachelor/Master degree in IT, Engineering, Cybersecurity, Risk Management or equivalent experience.
• Fluent English and knowledge of French or Dutch.
• 50% onsite and 50% homeworking in Brussels.
• AI Governance, Model Risk, Responsible AI, NIST AI RMF, EU AI Act and financial services experience are assets.