Position Overview:

As a Security Risk Manager within the CISO Office, you will join a growing Security Risk Management team whose mission is to strengthen the organisation's ability to identify, assess, manage, and report security risks. You will contribute to the development of efficient risk management processes, promote a risk-aware culture across the enterprise, and act as a key liaison between business stakeholders and security architects. Your work will directly support compliance with regulatory frameworks such as NIS2, ISO 27001, and GDPR, and help reinforce the organisation's overall security and resilience.

Your mission:

- Join the CISO team and contribute in setting up our risk management processes and tools.
- Conduct and support risk assessments, including identification, documentation, and evaluation of risks across IT and security domains.
- Participate in project and architecture reviews to identify, assess, and document security risks, ensuring that appropriate mitigation measures are defined, tracked, and aligned with the organisation's risk management framework.
- Propose and track risk responses that are proportionate and effective, ensuring mitigation plans are actionable and monitored.
- Follow up on action plans defined in the risk response to ensure timely execution and closure.
- Maintain and continuously improve the central risk register,



ensuring it reflects current risk exposure and mitigation status.
- Promote awareness initiatives to promote a risk-conscious culture across the organisation.
- Contribute to the implementation and monitoring of NIS2 controls related to risk management, including reporting and documentation.

Your profile:

- 10+ years of experience in cybersecurity, risk management, or related fields.
- Strong technical experience in control selection and implementation guidance (Network, IAM, SSDLC, Crypto, and more).
- Proven experience in regulatory compliance, cybersecurity governance, risk management, or audit programmes.
- Experience translating regulatory requirements into operational controls and measurable compliance activities.
- Experience coordinating compliance programmes across multiple departments and stakeholders.
- Strong knowledge of control frameworks, policy management, and compliance monitoring practices.
- Experience preparing evidence packages for audits and regulatory reviews.
- Strong analytical, documentation, and reporting skills.
- Ability to communicate effectively with technical teams, management, auditors, and regulatory stakeholders.
- Excellent organisational and project coordination skills.
- Fluent in English; Dutch and/or French is a plus.

📌 Security officer (España)
🏢 NTek Software Solutions
📍 España