People Management
1. Ensures clear role distribution within the team and delegates responsibilities to the appropriate employee.
2. Coaches and supports team members in their personal development (work meetings, training, evaluations, career paths, competencies, etc.) in collaboration with the HR Business Partner.
3. Establishes and maintains a skill matrix for all team members, aligned with required GRC competencies.
4. Acts as hiring manager for attracting new team members (job description, screening, interviews).
5. Advises leadership on the qualitative and quantitative staffing of the team within budget.
6. Manages leave, sickness, and absenteeism within the team and flags concerns regarding employees’ mental health.
7. Promotes and embodies the organization’s values within the team.
Cost Management
8. Ensures the team operates within the given budgetary and operational context (OPEX & CAPEX).
9. Prepares the team budget, submits it to leadership for validation, and monitors progress.
10. Provides capacity management in line with staff and ongoing projects.
11. Conducts continuous evaluation of costs versus delivered services.
12. Performs administrative follow-up of costs (review and approval of timesheets, invoices, purchases).
Leadership of GRC Experts (Second Line of Defense)
13. Leads a team of experts responsible for governance, risk, and compliance activities.
14. Ensures team expertise is properly applied in risk analyses, ESG assessments, contract evaluations, and other strategic topics.
15. Coordinates team involvement with internal and external stakeholders, including ERM and senior leadership.
16. Safeguards compliance with internal standards, policies, and legal/regulatory requirements NIS2, ISO 27001).
17. Facilitates reporting and follow-up to management and regulators.
Internal Processes and Knowledge Management
18. Designs, documents, and optimizes internal processes related to GRC activities, aligned with overarching organizational processes.
19. Documents and monitors work instructions within the team and facilitates knowledge sharing within the team and with other Team Leads.
20. Ensures internal processes are correctly applied and continuously improved.
Communication and Point of Contact
21. Acts as point of contact for internal and external stakeholders regarding GRC-related topics.
22. Facilitates clear communication between the GRC team, the ERM team, and other involved departments.
23. Coordinates the use of external service providers, including drafting RFPs, selection procedures, and monitoring delivered services, in collaboration with Vendor Management and Service Management.
24. Ensures standards and policies are applied and monitored within the team’s operations.
Scope of Responsibilities
25. Coordinating daily team activities.
26. Monitoring budgeting, cost control, and cost follow-up within the area of responsibility.
27. Achieving team results and supporting employees in achieving individual and collective goals.
28. Managing quality and setting/following up on KPIs (and OLAs) and reporting.
29. Safeguarding the application of standards and policies in the execution of activities.
Vereisten
30. Master’s degree level or equivalent through experience
31. Relevant work experience of 5–7 years
32. Knowledge of the specific field/service area
33. Knowledge of people management
34. Knowledge of project methodologies
35. Knowledge of the structure, internal (work) procedures, and regulations of Ypto and NMBS
36. Knowledge of common and company-specific software
37. Trilingual is important (Dutch + French + English)
Specific to the GRC Role
PhD level strongly recommended (without specific domain requirements)
Knowledge of people management, with responsibility for leading experts in their domain with high autonomy
Knowledge of corporate and operational processes within NMBS
Knowledge of HR-related processes, given the impact of policy changes on employees and the frequent consultation required with stakeholders
Knowledge of People Change Management, essential for guiding the team in implementing policy and strategy
Knowledge and experience in Effective Internal Communication methodologies
Ability to deliver presentations fluently to senior leadership
Experience in implementing policy in large organizations with complex labor relations
Knowledge of relevant legislation (GDPR, NIS 2, CRA, CER, AI Act)
Knowledge of domains within Cyber and Information Security
Our Offer
Within our open company culture, you will contribute behind the scenes to the digital transformation of NMBS. You will have a role with social impact and room for personal input. In addition to a good work-life balance and a market-based salary, your package includes:
Possibility of telework + flexible working hours
35 vacation days
Company car + public transport subscription
Target bonus
A comprehensive insurance package (affiliation without own contribution, excl. outpatient costs for family members);
Hospitalization and dental care for the whole family
Outpatient costs (medical expenses outside hospitalization)
Group insurance: supplementary pension, disability, and death coverage (cafeteria plan)
Occupational accident insurance (beyond statutory coverage)
Meal and eco vouchers
Net allowances for telework and car wash + internet budget