IT and cyber risk management professional Brussels (Hybrid: 50% on-site / 50% remote) Start: 16 february 2026 | duration: until march 2027 We are looking for a senior IT & Cyber Risk Management professional to support IT and Business teams in identifying, assessing, and mitigating operational IT and cyber risks, with a strong focus on third-party risk management in a financial services environment. Key responsibilities Perform IT and information security risk assessments (applications, projects, processes, third parties) Execute and coordinate IT/security audits and control plans for suppliers Produce clear, management-level risk reports and one-pagers Advise IT and Business teams on risk mitigation and control maturity Design and improve end-to-end third-party risk management processes Review IT and cybersecurity contractual clauses Act as Sthe ingle Point of Contact for delivered risk management services Required profile 5 years' experience in IT security and risk management Strong experience with third-party risk assessments and cloud environments (SaaS, AWS, HSP) Solid knowledge of ISO 27001, NIST, SOC, OWASP Background in financial services and large organisations Strong analytical, communication, and stakeholder management skills Nice to have: GRC tools (RSA Archer, ServiceNow) Vulnerability management / penetration testing Security certifications (CISSP, CISM, CIPP, CCSK) Languages: French & English: Fluent