About this role
We are looking for a Tribe Risk Officer to support a Tribe focused on Artificial Intelligence. You will help the Tribe spot, structure, prioritize and reduce technology, operational, regulatory and AI-related risks.
Your main goal: turn risk findings and recommendations into clear action plans that teams can actually deliver, track and govern. You will be the link between Risk Management, Information Security, Architecture, Delivery and Business teams, making sure every risk ends up with a realistic, prioritized and measurable roadmap.
What you will do :
Analyze and challenge findings raised by Internal Audit, Information Security, Risk Management, Architecture reviews and external assessmentsGroup scattered observations into clear risk themes, remediation streams and implementation plansDefine practical mitigation actions in line with architecture, security, operational and regulatory requirementsTurn risk statements into concrete backlog items, epics and delivery plansWork with squads, architects, product owners and Tribe leadership to get remediation work doneMake sure fixes tackle root causes, not just symptomsFollow progress, dependencies, residual risks and target datesRun quarterly risk review meetings to track audits and risk closureReport on risk posture and risk reduction to Tribe management and governance bodiesSupport audits, regulatory reviews and control assessmentsContribute to AI governance, operational resilience and regulatory compliance where relevantAct as the Tribe's single point of contact for risk governanceHelp build a strong risk management culture across the Tribe Minimum 5 years in IT Risk, Operational Risk, Cybersecurity, Technology Governance or Technology TransformationProven experience managing complex remediation programs with many stakeholdersExperience turning audit findings and risk assessments into actionable delivery plansStrong background in Operational, IT and Cyber Risk ManagementExperience in Agile organizations (Tribes, Squads, Chapters)Solid understanding of software delivery, DevSecOps and cloud environments (SaaS, public cloud, enterprise platforms)Knowledge of security frameworks and control environmentsExperience in change management, release management and operational governanceExperience in large, complex organizations and cross-functional transformation initiativesExperience leading workshops and aligning stakeholdersNice to have :
Experience in AI Governance, Model Risk Management or Responsible AIFamiliarity with NIST AI RMF, the EU AI Act or similar frameworksExperience in banking, insurance or financial servicesExperience with regulatory inspections, internal audits or supervisory reviewsEducation :
Bachelor's or Master's degree in IT, Engineering, Cybersecurity, Risk Management or equivalent experienceCertifications (an asset) :
CRISC, CISA, CISSP, ISO 27001 Lead Implementer / Lead Auditor, PMP, Prince2 or Agile certification, ITIL Foundation
Languages :
English: fluentFrench or Dutch: a plus
Your profile :
Strong analytical and problem-solving skills, and the ability to turn ambiguity into clear action plansExcellent communication and influencing skills, able to challenge constructively and build consensusResults-oriented, with a strong sense of ownershipAble to work independently while driving collaboration across teamsClear, concise writing for executive-level reportingComfortable in a fast-moving, complex environmentHappy to mentor and coach teams on risk management practices Based in Brussels, with occasional travel to other group entitiesHybrid setup: 50% on site, 50% homeworkingAll our positions are open to both women and men and are, of course, open to people with disabilities.