Senior AI IT Risk, Compliance & Operational Resilience Consultant

Next. Link is having an existing position as a Senior AI IT Risk, Compliance & Operational Resilience Consultant in Brussels area, Belgium. General information:

• Start date: ASAP
• Duration: 12 months renewable
• Workload: full time
• Work location: Brussels area, Belgium The consultant will be responsible for:
• Strengthening the ICT and AI risk management framework within CITO.
• Supporting teams in conducting Business Risk Assessments and identifying operational, cyber, regulatory, contractual, and fraud risks.
• Defining and monitoring remediation plans in collaboration with stakeholders.
• Contributing to the implementation and improvement of AI governance.
• Ensuring alignment with regulatory requirements related to AI, operational resilience, and outsourcing.
• Advising teams on exit strategies, critical supplier management, compliance controls, and requirements from the National Bank of Belgium.
• Participating in the development of risk management dashboards and indicators.
• Supporting AI4IT transformation programmes by integrating risk, compliance, resilience, and fraud prevention dimensions. Expected deliverables
• AI risk management framework and AI Governance Framework.
• Risk Assessments and risk registers for AI solutions.
• Regulatory impact assessments covering the AI Act, DORA, GDPR, and CRA.
• Remediation plans and control strengthening plans.
• Executive dashboards for risk and compliance monitoring.
• Opinions and recommendations on AI solutions, cloud services, and strategic suppliers.
• Support materials for internal audits, external audits, and regulatory inspections. Profile:
• Language: English fluent + French fluent or Dutch fluent
• Minimum 10 years experience
• IT Risk, IT Governance
• Operational Risk and compliance
• Audit, internal control, or risk management
• Experience in the financial or insurance sector
• Microsoft suite, including Word, Excel, and PowerPoint
• Understanding of AI and Generative AI technologies.
• Knowledge of the obligations under the European AI Act.
• Experience in identifying and assessing risks related to AI models, training data, LLMs, and AI services provided by third parties.
• Knowledge of operational resilience and cybersecurity challenges related to AI systems.
• Ability to work with IT, Architecture, Cybersecurity, Data, and Digital teams
• Cloud environments, outsourced services, and ICT risks
• DORA, GDPR, and third-party management frameworks