Job title Information Security Manager Organisation CEC Vzw Field of activity CEC is a non-profit organisation ( vzw/asbl ) by and for banks, with two core activities. On the one hand, we organise interbank payment traffic. On the other, we facilitate the exchange of different types of information between banks (for example in the context of Bank Switching ) and between banks and various public authorities (such as the exchange of information related to social security arrears – RSZ ). The technical and operational management of our services is outsourced. CEC acts as a bridge between banks, and between banks and a range of counterparties, including our service providers. Key-Responsibilities Due to the continued expansion of our services, we are looking for an Information Security Manager (m/f/x) As Information Security Manager, you take ownership of Operational & IT Security Risk Management in an outsourced service environment and act as a trusted advisor to both management and stakeholders. Your responsibilities include: Managing Operational & IT Security risks across outsourced services and providers Keeping the IT security policy, risk assessments, and incident response plan up to date Coordinating security assessments at service providers and ensuring solid documentation and evidence Developing and running a security awareness programme internally Acting as the primary security contact for the General Manager in the context of CEC’s role as critical infrastructure Managing relationships with external security & privacy consultants and coordinating bi‑weekly meetings with them and our technical provider Organising and chairing the IT Security Working Group with security experts from our member banks Driving fraud prevention initiatives Organising pooled audits at shared service providers (planning, RFPs, delivery follow‑up) Serving as back‑up for the Service & Administration Manager (and vice versa) Profile Proven IT / Information Security expertise with a hands‑on, autonomous mindset Solid understanding of or strong interest in ICT security regulations (GDPR, NIS2, DORA, CRA, …) and willingness to continuously develop your knowledge Strong communication skills and confidence in working with banks, experts, and external partners Excellent command of Dutch, French, and English (spoken and written) — multilingual meetings are part of the daily reality Address of employment : Brussels, Flexible hybrid working policy Workregim: 4/5 option negotiable Duration: unlimited duration Start date: as soon as possible How to apply : Please submit your CV and cover letter by June 25 at the latest For more info about this vacancy, you can contact Kristien De Lepeleire kristine.de.lepeleire@cecbelgium.be