Information Technology Risk Manager

💼Job Title: IT and Cyber Risk Management

👨‍💻Job Type: Contract/Freelance

📍Location: Brussels, Belgium

💼Work regime: Hybrid (2 Day Onsite in a Week)

🔥Keywords:Information Security and Risk Management frameworks (ISO27001, SOC, NIST, OWASP, etc.)

Sector: Our client is a is a key player in the financial services sector, specializing in post-trade settlement solutions for securities transactions. It operates a robust infrastructure that facilitates the clearing, settlement, and safekeeping of a wide range of financial instruments.

What you will be doing

- Identify operational IT and Cyber risks on assets/applications, projects and 3rd-parties.

- Advice, consult, monitor and report on risk treatment in order to reduce the overall risk exposure of IT and Business at an optimized cost.

- Elaborate and manage the implementation of a flexible strategy to reduce IT and Cyber risks in accordance with the IT and Information Security policies.

- you execute IT and security risk assessments in IT and business contexts (applications, business solutions, 3rd-parties organization, processes…).

- you execute information security and IT control plans on third parties to ensure that they are performing according to signed contracts.

- you coordinate and perform IT and security audits on third parties.

- you create one-pagers and synthetic risk reports for a management audience

- you set up processes and procedures for an end to end IT and security management for third-parties.

- you deliver consulting on IT and Cyber risk management to internal customers (IT and Business) :

- Proposition or validation of measures to mitigate risks.

- Creation of detailed or synthetic risk report.

- Support in increasing risk control maturity by providing a valuable follow up and reporting.

- you manage customer relationship and are the Single Point Of Contact for the risk management services you delivered.

- you contribute to definition and improvement of risk management methods and tools on the third-party management area.

- you contribute to writing processes and procedures supporting risk management activities outlined above, for both an expert and non-expert audience. Experience on linking different ISMS processes is a must.

- you are knowledgeable on CIAT topic and able to adapt to the way this is applied in the bank for third-party suppliers.

- you review IT and security contractual clauses for suppliers servicing bank activities.

Technical Skills:

• Significant experience in operational/security risks management.
• Significant experience in working with cloud services (SaaS, HSP, AWS)
• Strong MS Office Skills (Excel, word, Powerpoint)
• Knowledge of software development security best practices
• Experience in release management, change management, incident management, testing.
• Security certifications like CISSP, CISM, CIPP, CCSK.
• Experience with RSA Archer and/or ServiceNow GRC.
• Experience in vulnerability management and penetration testing
• Knowledge of control frameworks and audit methodologies.
• Knowledge of Information Security and Risk Management frameworks (ISO27001, SOC, NIST, OWASP, etc.)
• Professional experience in information security (5+ years), particularly in cloud based solutions
• Strong IT background.
• Professional experience in Financial Services. used to work in large companies.
• Experience in reviewing and amending IT and Cyber Third-party clauses in contracts

A little about us:

Innova Solutions is a diverse and award-winning global technology services partner. We provide our clients with strategic technology, talent, and business transformation solutions, enabling them to be leaders in their field.

• Founded in 1998, headquartered in Atlanta (Duluth), Georgia.
• Employs over 50,000 professionals worldwide, with annual revenue approaching $3.0B.
• Delivers strategic technology and business transformation solutions globally.
• Operates through global delivery centers across North America, Asia, and Europe.
• Provides services for data center migration and workload development for cloud service providers.

Awardee of prestigious recognitions including:

• Women’s Choice Awards - Best Companies to Work for Women & Millennials, 2024
• Forbes, America’s Best Temporary Staffing and Best Professional Recruiting Firms, 2023
• American Best in Business, Globe Awards, Healthcare Vulnerability Technology Solutions, 2023
• Global Health & Pharma, Best Full Service Workforce Lifecycle Management Enterprise, 2023
• Received 3 SBU Leadership in Business Awards
• Stevie International Business Awards, Denials Remediation Healthcare Technology Solutions, 2023