Senior AI IT Risk, Compliance & Operational Resilience Consultant

NextLink is having an existing
position as a Senior AI IT Risk, Compliance &
Operational Resilience Consultant in Brussels
area, Belgium.

General information:

- Start date: ASAP

- Duration: 12 months renewable

- Workload: full time

- Work location: Brussels area, Belgium

The consultant
will be responsible for:

•
Strengthening the ICT and AI risk management framework within CITO.

• Supporting
teams in conducting Business Risk Assessments and identifying operational,
cyber,

regulatory,
contractual, and fraud risks.

• Defining and
monitoring remediation plans in collaboration with stakeholders.

• Contributing
to the implementation and improvement of AI governance.

• Ensuring
alignment with regulatory requirements related to AI, operational resilience,
and outsourcing.

• Advising
teams on exit strategies, critical supplier management, compliance controls,
and

requirements
from the National Bank of Belgium.

•
Participating in the development of risk management dashboards and indicators.

• Supporting
AI4IT transformation programmes by integrating risk, compliance, resilience,
and fraud

prevention
dimensions.

Expected
deliverables

• AI risk
management framework and AI Governance Framework.

• Risk
Assessments and risk registers for AI solutions.

• Regulatory
impact assessments covering the AI Act, DORA, GDPR, and CRA.

• Remediation
plans and control strengthening plans.

• Executive
dashboards for risk and compliance monitoring.

• Opinions and
recommendations on AI solutions, cloud services, and strategic suppliers.

• Support
materials for internal audits, external audits, and regulatory inspections.

Profile:

• Language: English fluent + French fluent or Dutch fluent

• Minimum 10 years experience

• IT Risk, IT Governance

• Operational Risk and compliance

• Audit, internal control, or risk management

• Experience in the financial or insurance sector

• Microsoft suite, including Word, Excel, and PowerPoint

• Understanding of AI and Generative AI technologies.

• Knowledge of the obligations under the European AI Act.

• Experience in identifying and assessing risks related to AI
models, training data, LLMs, and AI

services provided by third parties.

• Knowledge of operational resilience and cybersecurity
challenges related to AI systems.

• Ability to work with IT, Architecture, Cybersecurity, Data,
and Digital teams

• Cloud environments, outsourced services, and ICT risks

• DORA, GDPR, and third-party management frameworks