Job Description
Job Title: Risk Assessment Analyst
Location: Namur, Belgium (Hybrid – primarily on-site)
We are seeking a Risk Assessment Analyst to support cybersecurity risk management and NIS2 compliance initiatives within a large-scale IT transformation program. The role focuses on conducting cybersecurity risk assessments, analyzing operational and technical risks, and supporting governance and compliance activities.
Key Responsibilities
Participate in cybersecurity risk assessments for systems, applications, processes, and critical assets
Collect, structure, and analyze information related to assets, threats, controls, and risk exposure
Apply risk assessment methodologies to evaluate impacts, likelihoods, and residual risks
Maintain and update cybersecurity risk registers and documentation
Identify gaps against NIS2 requirements and internal security frameworks
Prepare reports, risk summaries, and decision-support documentation for governance teams
Support audit, compliance, and NIS2 evidence collection activities
Collaborate with technical, operational, and project teams to ensure accurate risk analysis
Required Skills & Experience
Bachelor's or Master's degree in IT, Cybersecurity, Risk Management, or related field
Experience or strong interest in cybersecurity risk management and compliance
Understanding of IT environments, systems, networks, and security concepts
Knowledge of NIS2, cybersecurity frameworks, and risk assessment methodologies
Strong analytical, documentation, and organizational skills
Ability to work with both technical and non-technical stakeholders
Rigorous, structured, and detail-oriented mindset
Languages
French: Native or fluent proficiency required
English: Nice to have
Additional Information
Full-time assignment primarily based on-site in Namur
Occasional travel within Wallonia may be required
Standard daytime working schedule
Focus of the Role
Supporting cybersecurity governance and NIS2 compliance by delivering structured, high-quality risk assessments and contributing to enterprise risk management maturity