LeHibou
Notre client dans le secteur Services publics recherche un/une Security Risk Manager H/F Description de la mission : Job offer – Security Risk Manager Context and objective of the mission As a Security Risk Manager within the CISO Office, the consultant will join a growing Security Risk Management team whose mission is to strengthen the organisation's ability to identify, assess, manage, and report security risks. The role contributes to the development of efficient risk management processes, promotes a risk-aware culture across the enterprise, and acts as a key liaison between business stakeholders and security architects. The mission directly supports compliance with regulatory frameworks such as NIS2, ISO 27001, and GDPR, and helps reinforce the organisation's overall security and resilience. Main responsibilities • Contribute to the setup of risk management processes and tools within the CISO team • Conduct and support risk assessments, including identification, documentation, and evaluation of risks across IT and security domains • Participate in project and architecture reviews to identify, assess, and document security risks • Ensure appropriate mitigation measures are defined, tracked, and aligned with the organisation's risk management framework • Propose and track risk responses that are proportionate and effective, ensuring mitigation plans are actionable and monitored • Follow up on action plans defined in the risk response to ensure timely execution and closure • Maintain and continuously improve the central risk register, ensuring it reflects current risk exposure and mitigation status • Promote awareness initiatives to foster a risk-conscious culture across the organisation • Contribute to the implementation and monitoring of NIS2 controls related to risk management, including reporting and documentation Profile sought Experience • 10+ years of experience in cybersecurity, risk management, or related fields Technical and functional skills • Strong technical experience in control selection and implementation guidance across Network, IAM, SSDLC, Crypto, and related areas • Proven experience in regulatory compliance, cybersecurity governance, risk management, or audit programmes • Experience translating regulatory requirements into operational controls and measurable compliance activities • Experience coordinating compliance programmes across multiple departments and stakeholders • Strong knowledge of control frameworks, policy management, and compliance monitoring practices • Experience preparing evidence packages for audits and regulatory reviews Soft skills • Strong analytical, documentation, and reporting skills • Ability to communicate effectively with technical teams, management, auditors, and regulatory stakeholders • Excellent organisational and project coordination skills • Fluent in English; Dutch and/or French is a plus Compétences / Qualités indispensables : Cybersecurity risk management, Risk assessments, Regulatory compliance (NIS2, ISO 27001, GDPR), Control frameworks and mitigation tracking, Security architecture review, English fluency Compétences / Qualités qui seraient un + : Dutch and/or FrenchInformations concernant le télétravail : Hybrid
