Risk & Compliance Specialist

Risk & Compliance Specialist – LCM

Assignment Details

Client: LCM

Position: Risk & Compliance Specialist

Start Date: ASAP

Duration: Long-term assignment

Location: Schaerbeek & remote (hybrid, 1–2 days a week onsite)

Working Regime: Full-time

Languages: Dutch, French and English

Context

• Within ICT, we are strongly committed to providing reliable services in accordance with Service Level Agreements and we facilitate the digital transformation of the CM-MC Group. We manage a wide portfolio of technologies that is constantly evolving. As a provider of IT solutions in a highly regulated industry, we must demonstrate compliance with various compliance requirements, both through reporting to control bodies and by providing information in internal and external audits.
• In this role, you will be part of the second-line audit of the CM-MC Group. You will contribute to the demonstrability of compliance control measures and to effective and pragmatic risk management. Within ICT, you will work closely with the various ICT department directors and ICT process managers, as well as with the Risk-Security-Legal department and business stakeholders. You will actively contribute to the further professionalisation and maturity of risk management and compliance within the organisation.

Your Focus Areas

Governance, Processes and Procedures

• Organizing risk assessments for ICT Management in accordance with the guidelines of the regulations.
• Reporting on the evolution of action plans to ICT Management and the risk committee.
• Maintaining the register of control measures for the identified risks.
• Developing measurable Compliance KPIs and Key Risk Indicators and reporting to management and governance committees.
• Keeping the inventory of supporting documents up-to-date for the various compliance reporting requirements.
• Identifying gaps in evidence at the level of ICT governance, processes and procedures, and reporting on their evolution to ICT Management.
• Collaborating with suppliers and partners on compliance and audit requirements.
• Monitoring consistency and applicability within the organization.

Implementation of Compliance Frameworks

• Supporting the implementation and operationalization of governance and security frameworks of the CM-MC model, including COBIT, NIS2 and DORA.
• Translating regulations into concrete and workable guidelines.

Compliance and Risk Monitoring

• Following up on evolutions in regulations and translating new requirements into the CM-MC ICT environment.
• Drafting and maintaining reports, dashboards and audit evidence.
• Substantiating compliance with internal and external audits.
• Evaluating and following up on ICT supplier risks and contributing to Third Party Risk Management processes in accordance with DORA.

Tooling and KPIs

• Managing risks, action plans and control measures in RiskID.
• Defining and following up KPIs to demonstrate the effectiveness of controls.
• Using Power BI, Jira and Dynatrace as sources of information for Key Risk Indicators.
• Proactively detecting and developing opportunities for improvement within the organization.

AI Support

• Using AI tools for analysis, documentation and audit preparation.

Required Experience and Skills

• Minimum 3–5 years of experience in ICT risk, compliance or audit functions.
• Strong communication skills and stakeholder management.
• Experience or strong affinity with compliance and audit within an IT context.
• Interest in governance and control frameworks.
• Analytically strong and structured.
• Ability to make complex regulations understandable and applicable.
• Fluent multilingualism in Dutch, French and English.

Nice-to-Have Skills

• Certifications in ICT Governance, Risk or Audit are a plus.
• Experience with audit preparation or cooperation with auditors.
• Experience with NIS2, DORA or similar regulations.
• Experience with COBIT and ITIL frameworks.
• Experience with compliance in a context of procurement through public tenders.
• Knowledge of Jira and Power BI for exploiting information.
• Affinity with Agile DevOps.