Job Description

Mission Overview:

The Tribe Risk Officer - Artificial Intelligence is a consultancy mission at the client site, representing Keystone Solutions. As a Keystone Solutions consultant, you will be hired to work on client projects, delivering expertise and value in risk management within an AI-driven environment.Mission Context:The Tribe Risk Officer supports the AI Tribe in identifying, structuring, prioritizing, and mitigating technology, operational, regulatory, and AI-related risks. The primary mission is to transform risk observations, findings, and recommendations into executable mitigation plans that can be implemented, monitored, and governed through the Tribe's delivery processes. The Tribe Risk Officer acts as the bridge between Risk Management, Information Security, Architecture, Delivery Management, and Business stakeholders, ensuring that risks are translated into realistic, prioritized, and measurable implementation roadmaps.Responsibilities:

• Analyze and challenge risk findings raised by Internal Audit, Information Security, Risk Management, Architecture reviews, and external assessments.
• Consolidate and restructure risk observations into coherent risk themes, remediation streams, and implementation plans.
• Define practical mitigation actions and ensure alignment with architecture, security, operational, and regulatory requirements.
• Coordinate with squads, architects, product owners, and tribe leadership to secure execution of remediation activities.
• Monitor implementation progress, dependencies, residual risks, and target dates.
• Report overall risk posture, remediation status, and risk reduction achievements to Tribe management and governance bodies.
• Contribute to the development of a sustainable risk management culture across the Tribe.
• Organise quarterly risk evaluation meetings to track progress on audits and risk closure.

Function Description:

• Own the end-to-end lifecycle of risks from identification to closure.
• Review existing risk inventories and transform fragmented findings into structured remediation programs.
• Translate risk statements into concrete implementation actions, backlog items, epics, and delivery plans.
• Define target operating models and mitigation roadmaps together with architects and delivery teams.
• Ensure risks are properly assessed, prioritized, and documented.
• Challenge remediation proposals to ensure they address root causes and not only symptoms.
• Coordinate risk reduction initiatives across multiple squads and stakeholders.
• Facilitate regular risk review sessions with Tribe leadership.
• Maintain a consolidated view of risk exposure, mitigation progress, and residual risks.
• Prepare management reporting and executive-level summaries.
• Support audits, regulatory reviews, and control assessments.
• Build trusted relationships with Product Owners, Architects, Delivery Leads, Security Officers, and Business representatives.
• Contribute to the continuous improvement of risk management frameworks, tooling, and reporting.
• Support the implementation of AI governance, operational resilience, and regulatory compliance requirements where applicable.
• Act as the Tribe's Single Point of Contact for risk governance activities.

Education:Bachelor or Master degree in Information Technology, Engineering, Cybersecurity, Risk Management, or equivalent through experience.Certification:One or more of the following certifications would be considered an asset:

• CRISC
• CISA
• CISSP
• ISO27001 Lead Implementer / Lead Auditor
• PMP, Prince2 or Agile certification
• ITIL Foundation

Languages:French and Dutch: Knowledge of either is a plus.

English: Fluent, good, or not required.Travel:Primarily Brussels-based with occasional travel within group entities.Telework:Expectation: 50% on site & 50% homeworking.Required Knowledge / Experience:

• Minimum 5 years of experience in IT Risk, Operational Risk, Cybersecurity, Technology Governance, or Technology Transformation.
• Demonstrated experience managing complex remediation programs across multiple stakeholders.
• Experience in translating audit findings and risk assessments into actionable delivery plans.

Technical Experience:

• Strong experience in Operational Risk, IT Risk, and Cyber Risk Management.
• Experience with risk remediation planning and implementation governance.
• Experience working with Agile organizations (Tribes, Squads, Chapters).
• Strong understanding of software delivery, DevSecOps, and cloud environments.
• Experience with SaaS platforms, public cloud, and enterprise platforms.
• Knowledge of security frameworks and control environments.
• Experience in change management, release management, and operational governance.
• Experience working with multi-disciplinary teams including Architecture, Security, and Delivery.
• Strong reporting and executive communication skills.

Preferable:

• Experience in AI Governance, Model Risk Management, or Responsible AI practices.
• Familiarity with NIST AI RMF, EU AI Act, or emerging AI governance frameworks.
• Knowledge of financial sector regulatory environments.

Business Experience:

• Strong knowledge of risk management frameworks and control methodologies.
• Experience in large and complex organizations.
• Experience managing cross-functional transformation initiatives.
• Experience leading workshops and facilitating stakeholder alignment.
• Experience preparing and presenting executive-level reporting.
• Ability to challenge stakeholders constructively and influence decision-making.

Preferable:

• Experience within banking, insurance, or financial services.
• Experience with regulatory inspections, internal audits, or supervisory reviews.

Soft Skills:

• Strong analytical and problem-solving capabilities.
• Ability to structure ambiguity into actionable plans.
• Excellent communication and influencing skills.
• Strong stakeholder management capabilities.
• Strong organizational and planning skills.
• Ability to work independently while driving collaboration across teams.
• Results-oriented and execution-focused mindset.
• Excellent presentation and reporting skills.
• Ability to challenge constructively and facilitate consensus.
• Strong writing skills, capable of producing concise executive documentation.
• Comfortable operating in a fast-moving and complex environment.
• Strong sense of ownership and accountability.
• Ability to mentor and coach teams on risk management practices.

Keystone Solutions Advantages:

• As a consultant, you will work on-site, embodying the Keystone Solutions identity and values in every engagement.
• Experience dynamic projects and diverse challenges across various client environments.
• Accelerate your professional development with turbo-charged learning and broad exposure to industry best practices.
• Skyrocket your ambition with a clear commitment to career growth within the Keystone Solutions framework.
• Being a “K-Stone” means bringing core values—integrity, excellence, and collaboration—to every mission.

If you are ready to tackle technical and strategic challenges in a dynamic consultancy environment, apply today at Keystone Solutions Career Portal.