Open jobs
IT & Cyber Risk Manager
IT & Cyber Risk Management Advisor – Expert (Governance, Risk & Compliance)
As an IT & Cyber Risk Management Advisor, you will support IT and business teams in identifying, assessing, and managing IT and Cyber Security risks across applications, projects, cloud environments, and third-party services. Acting as a trusted advisor, you will help ensure risks are effectively managed throughout their lifecycle while strengthening the organization's governance, risk, and compliance (GRC) framework. You will collaborate with technical and business stakeholders to improve risk management practices, promote security best practices, and contribute to a secure and compliant IT environment.
What will you do?
- Identify, assess, and monitor IT and Cyber Security risks across applications, projects, Agile Tribes, Squads, and third-party suppliers
- Support business and IT teams in managing risks from identification through treatment and closure
- Perform quality assurance on IT and Cyber Security risks to ensure compliance with governance standards
- Conduct IT and Cyber risk assessments for Shadow IT applications and non-governed technology solutions
- Provide expert advice on IT and Cyber Security Risk Management to business and technical stakeholders
- Report IT and Cyber Security risks and overall risk posture to Cyber Security, IT, and Business Management
- Support the implementation of risk treatment plans to reduce operational and cyber risks
- Contribute to the continuous improvement of IT Risk Management methodologies, processes, and tools
- Ensure alignment between Information Security Management Systems (ISMS) and IT Risk Management processes
- Evaluate cloud environments (SaaS, HSP, AWS) from a security and risk perspective
- Apply knowledge of software development security best practices throughout project lifecycles
- Review risks related to release management, change management, incident management, and testing activities
- Collaborate with internal stakeholders to ensure compliance with client's security policies and standards
- Produce structured reports, risk documentation, and management presentations
- Support governance activities and promote a strong risk-aware culture across the organization
What do you bring?
- Minimum 8 years of experience in IT Risk Management, Cyber Security, Information Security, or Governance, Risk & Compliance (GRC)
- Proven experience linking Information Security Management Systems (ISMS) with IT Risk Management processes
- Strong knowledge of IT control frameworks, governance standards, and audit methodologies
- Experience assessing risks in cloud environments, including SaaS, HSP, and AWS
- Good understanding of secure software development practices and application security principles
- Experience with release management, change management, incident management, testing, and operational IT processes
- Experience performing IT and Cyber Security risk assessments and advising stakeholders on mitigation strategies
- Ability to communicate effectively with both technical and non-technical stakeholders
- Excellent analytical, documentation, reporting, and problem-solving skills
- Strong stakeholder management, consulting, and influencing abilities
- Ability to work independently while collaborating across multidisciplinary teams
- Experience within the banking or financial services sector is considered a strong advantage
- Security certifications such as CISSP, CISM, CIPP, CCSK, or equivalent are preferred
- Master's degree or equivalent higher education
Languages
- English: Sound knowledge of English as well as (at least) one local language
- Dutch: Nice to have
- French: Nice to have
Job Details
- Role: IT & Cyber Risk Management Advisor – Expert
- Location: Brussels, Belgium
- Start Date: 31/08/2026
- End Date: 30/08/2027
- Hours per week: 40 hours
- Working model: Hybrid (50% onsite / 50% homeworking in Belgium)
Questions candidates ask before applying
This depends on the role and the client, but on average our process takes 2–4 weeks from first contact to offer. We keep you informed at every step.
There are multiple ways to apply for a position with us. If you wish to apply directly to a specific job, please visit the job listing and use the "Apply" button to submit your application. Alternatively, if you are interested in applying for an open position or exploring potential opportunities, you can fill out our online form.
We are open to discussing various commercial arrangements depending on the volume and nature of the collaboration. Contact us for a tailored proposal.
Our fees are charged to the hiring company and are based on a percentage of the candidate's annual salary. We discuss this transparently during the intake. There are no costs for candidates.
Yes! You can submit an open application via our website. We'll keep your profile on file and reach out when a suitable opportunity arises.
We conduct thorough interviews to assess both technical skills and cultural fit. Depending on the role, we may also coordinate technical assessments or case studies.
Our process consists of several steps: (1) Intake with the client to understand the role and culture, (2) Active sourcing and screening of candidates, (3) Presentation of a shortlist, (4) Interview coordination, (5) Offer and onboarding support.
We are a driven, personal, and no-nonsense team. We believe in honest communication, long-term relationships, and real impact — for candidates and clients alike.
We ARE Infotech is part of the We ARE group, with years of experience in specialized recruitment. Our IT division focuses exclusively on the tech sector.
We ARE Infotech is headquartered in Rotterdam, the Netherlands, with a second office in Pristina, Kosovo. We operate across Europe.
Yes, we recruit both permanent employees and freelance/interim professionals, depending on your needs.
Depending on the role, we typically present the first shortlist within 1–2 weeks. For hard-to-fill positions, we set realistic timelines upfront.
We combine deep tech knowledge with a personal approach. We don't just match CVs — we match people and cultures. Our consultants have hands-on experience in the tech industry.
You can reach out via our contact form or call us directly. We'll schedule an intake to understand your needs and start the search for the right candidates.
Absolutely. We guide you through the entire process, from CV feedback to interview tips and salary negotiation support.
Yes, our recruitment services are completely free for candidates. We are paid by the hiring companies, so there are no costs for you at any stage of the process.
We specialize in tech and IT roles such as software engineers, data engineers, cloud architects, DevOps engineers, cybersecurity specialists, AI/ML engineers, product managers, and more. We work across various sectors including finance, healthcare, scale-ups, and enterprise.