IT Risk Officer

Position

IT Risk Officer

Location

Kallo (BE)

Contract type

Payroll/Freelance

General Description

As the IT Risk Officer at Katoen Natie, a global leader in logistics, you will be responsible for continuously managing cybersecurity-related risks associated with ICT infrastructure, systems, services and third parties. This includes planning risk assessments, analysing results, assigning risk ownership, advising on and following up risk treatment, and reporting the status to both the Security Board and IT management.

You will further develop the organisation’s risk management strategy, ensuring that risks remain within acceptable levels in accordance with its risk appetite. This involves proposing mitigating actions and controls that complement the current security management strategy.

Together with the other IT Security Officers, you will also be responsible for implementing and operating the Information Security Management System, developing and maintaining security policies and standards, overseeing compliance with cybersecurity-related legal, regulatory and contractual requirements, and conducting security awareness training.

Job Description

IT Risk management

• Develop the organisation’s IT risk management strategy.
• Advocate risk management practices with IT management and business owners.
• Identify and assess cybersecurity-related threats, vulnerabilities and risks in IT systems, applications and services.
• Document and analyse identified risks, assign the appropriate risk owner, and propose suitable risk treatment options.
• Guide, document and monitor risk acceptance decisions.
• Follow up and report on risks throughout the complete risk management lifecycle.
• Monitor the effectiveness of security controls and risk levels.
• Manage exceptions as an integral part of the risk management process.
  
  

IT Security Officer responsibilities

General

• Implement and operate the Information Security Management System (ISMS).
• Support IT and business projects with cybersecurity expertise, insights and advice.
  
  

Awareness

• Develop and deliver cybersecurity educational materials.
• Maintain the organisation’s security awareness platform and related solutions.
• Promote cybersecurity awareness and secure working practices throughout the organisation.
  
  

Policies and standards

• Develop and maintain security policies and other documents within the policy framework.
• Support the documentation of security standards and operating procedures.
• Manage, document and monitor requests for exceptions.
  
  

Third-party security

• Assess the security maturity of critical suppliers and partners.
• Support business contacts in providing security assurance to customers and other third parties.
  
  

Your profile

• At least 5 years of relevant experience.
• You have a hands-on attitude.
• You have experience with cybersecurity awareness and training.
• You have good knowledge of cybersecurity technologies and controls.
• You have knowledge of and experience with cybersecurity frameworks such as ISO 27001, ISO 27005, CIS, NIS2 and CyberFundamentals.
• You have excellent analytical skills and can identify and assess risks in a complex and diverse environment.
• You have a broad technical background, enabling you to collaborate with subject matter experts across different domains.
• You have experience developing, communicating and enforcing security policies, guidelines and procedures.
• You have experience identifying and addressing cyber threats and vulnerabilities in an international and industrial environment.
• You are familiar with relevant cybersecurity regulations and legislation.
• You have strong verbal and written communication skills and can explain abstract or technical topics to a non-technical audience.
• You have excellent leadership skills and are able to drive change.
• You can maintain focus in a high-pressure working environment.
  
  

Required Experience

5 years

We offer

• A challenging cybersecurity role in a leading international and industrial company with a dynamic, no-nonsense culture.
• The opportunity to shape and further develop our IT risk management strategy and make a real impact on our cybersecurity maturity.
• A varied role with significant responsibility and ownership, combining IT risk management, information security, compliance and security awareness.
• Close collaboration with IT specialists, business stakeholders and management across the organization.
• A professional environment with room for initiative, continuous development and opportunities to grow within a large international organization.
• A flexible hybrid working arrangement based on a 3/2 office/home regime.
• The possibility to join us either as a freelancer or as an employee. Employees receive an attractive salary package with extra-legal benefits such as meal vouchers, hospitalization insurance and a company car.