Senior IT & Cyber Risk Specialist (Financial Sector)

<h2> General information </h2> <h3> Reference </h3> 2025-1124   <h2>Position description</h2><h3> Job title </h3><p id="fldjobdescription_jobtitle">Senior IT &amp; Cyber Risk Specialist (Financial Sector)</p><h3> Function </h3><p id="fldjobdescription_primaryprofile">Advisory - Senior Advisor</p><h3> Roles &amp; Responsibilities </h3> <p><ul><li>Monitor and assess IT and cybersecurity risks across the organization, focusing on second-line oversight of the first line’s risk management practices.</li><li>Conduct independent risk assessments and challenge the first line’s processes and control effectiveness across applications, business solutions, assets, and third-party relationships.</li><li>Review and validate risk assessments and treatment plans proposed by the first line, ensuring compliance with organizational and regulatory standards.</li><li>Develop and manage IT and security control frameworks, ensuring alignment with internal policies, industry best practices, and regulatory requirements (e.g., ISO 27001, NIST, SOC).</li><li>Support the implementation of the various aspects of DORA with the objective to achieve compliance.</li><li>Conduct audits and provide oversight of IT and cybersecurity practices within the first line of defense, especially in third-party risk management.</li><li>Produce independent risk reports for senior management and governance committees, synthesizing security risks and providing recommendations for risk mitigation.</li><li>Advise on risk management strategies and propose improvements to enhance the organization’s security posture and overall risk maturity.</li><li>Act as a trusted advisor to the business, providing guidance on emerging risks and ensuring that the first line implements appropriate risk mitigations.</li><li>Ensure the integration and coherence of risk management processes across different business units, with a focus on third-party risk.</li><li>Oversee the review of IT and security contractual clauses with suppliers, ensuring they meet second line’s standards for risk management.</li><li>Collaborate with the first line, providing support and challenge to enhance the effectiveness of security controls and practices.</li></ul><p><br/>#LI-DNI</p></p> <h3> Location </h3><p id="fldjobdescription_customcodetablevalue1">Zaventem HQ</p><h3> Skills &amp; Qualifications </h3> <p><ul><li>4+ years of experience in information security or risk management, with a focus on second line functions.</li><li>Experience in performing information security assessments or audits.</li><li>Demonstrated experience in operational security risk management.</li><li>Strong understanding of Information Security frameworks (ISO 27001, NIST, SOC) and their application in second line assurance activities.</li><li>Strong understanding of the FS regulatory landscape (DORA, NBB, EBA, etc.).</li><li>Proven ability to conduct risk oversight, challenge the first line’s risk management activities, and ensure compliance with internal and external standards.</li><li>Experience working in financial services or large-scale enterprises, with an understanding of regulatory requirements in IT and cybersecurity.</li><li>Security certifications such as CISSP, CISM, CCSK, or similar.</li><li>Familiarity with vulnerability management, penetration testing, and reviewing IT and security clauses in contracts.</li><li>Knowledge of control frameworks and audit methodologies within second line risk functions.</li><li>Strong communication and influencing skills, capable of working with senior stakeholders and challenging the first line when necessary.</li><li>Excellent analytical and problem-solving abilities, with a focus on providing independent assurance and actionable recommendations.</li><li>Proactive, autonomous, teamplayer, collaborator and able to synthesize complex issues.</li></ul></p> <h3> We offer </h3> <p><ul><li>An international corporate culture in which personal growth, mutual trust and lifelong learning are being fostered.</li><li>A competitive and attractive compensation package and a great number of extra-legal advantages (Company car + fuel card, IPhone/IPad, group &amp; hospitalization insurance, Allowances,…) which are customizable with our Reflex@KPMG plan.</li><li>Career and business development opportunities combined with trainings based on your personal needs and ambitions.</li><li>Learning and growth opportunities designed for leaders through our Management development Track.Flexible, hybrid work arrangements to enable working from wherever you are.</li><li>A team of passionate colleagues to reach higher goals and support each other.</li><li>A buddy and performance manager to support and assist you through your first months at KPMG.</li><li>Great teambuilding, sport &amp; wellbeing initiatives through our Together@KPMG program.</li><li>An inclusive workspace t