> Markdown version of [/jobs/ext/1209174-it-cyber-permanent-control-officer-hq-brussels](https://www.wearedevelopers.com/jobs/ext/1209174-it-cyber-permanent-control-officer-hq-brussels). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT & Cyber Permanent Control Officer - HQ Brussels - **Company:** BNP Paribas Fortis SA/NV - **Location:** Brussel, Belgium - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Word, Microsoft Excel, Agile Methodology, Cyber Security, IT Management, Microsoft PowerPoint, Microsoft SharePoint - **Published:** July 9, 2026 - **Apply:** https://be.indeed.com/viewjob?jk=a0ff13e34a1366c3 ## About the Role * A Master's degree in IT, economics, or engineering, with a strong IT foundation. 10+ years of experience, including at least 5 years in Risk or IT whether in financial services, consulting, or another regulated industry., * IT & Security Process Insight: You understand how IT and security technologies integrate into risk and operational frameworks and where the gaps might be. * Risk Assessment Skills: Hands-on experience in identifying and evaluating IT and cyber risks, with a practical (not just theoretical) approach. * Regulatory & Standards Know-How: Familiarity with frameworks like EBA guidelines, DORA, ISO 27001, or NIST and the ability to apply them in real-world IT risk and compliance scenarios. * Control Design & Testing: You can translate regulations and policies into effective controls and know how to test whether they actually work. * Agile Mindset: Experience with Agile methodologies in a risk or control environment is a plus, but adaptability matters most. * Process Thinking: You quickly grasp end-to-end processes, spot risks, and propose practical solutions without getting lost in bureaucracy. * Clear Communication: Whether it's a report for executives or a presentation for regulators, you distill complex topics into concise, actionable messages. * Stakeholder Alignment: You bridge the gap between technical teams, business units, and regulators keeping everyone aligned without losing sight of compliance and risk goals. * Collaboration: You thrive in cross-functional teams, working smoothly with colleagues and partners to execute risk and control initiatives. Practicalities * Languages: Fluent in French or Dutch, with strong English (written and spoken). * Tools: Comfortable with SharePoint, Excel, Word, and PowerPoint. * Nice-to-have: Experience with RISK 360 is a plus, but not a must. ## Description Join BNP Paribas Fortis as an IT Operational Permanent Control (OPC) Specialist At BNP Paribas Fortis, our Cyber Security division unites the Centre of Excellence (CoE) Security and IT Filiere Production Security BE to design, implement, and maintain robust security solutions. Our mission? To foster a trustworthy, secure environment for both our colleagues and clients. We're seeking a proactive professional to join our IT Operational Permanent Control (OPC) team, a key function within Governance, Risk, and Compliance (GRC). Here, you'll play a pivotal role in helping IT and Business Units navigate operational risks tied to IT and Cyber Security, while reinforcing an adaptive, resilient control framework across the bank. AND IN DETAIL * Identification and assessment of risks: You'll analyse data from risk systems, reports, and governance bodies, turning complex information into practical, risk-based insights. Your conclusions will help leaders make informed decisions. * Controls Execution & Reporting: You'll interpret, adapt, and run control tests (compliance, fraud, outsourcing, etc.), then report findings to the CIO, ensuring controls align with IT's strategic priorities. * Regulatory & Internal Reporting: You'll prepare precise, high-impact reports for the Internal Control Committee (ExCo), regulators (NBB/BNB, ECB), and Group entities (CDF/IT Group), shaping risk discussions at the highest level. * Procedure Governance: As the gatekeeper for IT risk and security procedures, you'll ensure they're up to date, accessible, and visible, keeping our compliance framework structured and resilient. * Governance Body Support: Acting as NAC secretary for major IT initiatives, you'll track stakeholder conditions (Business & Functions), driving accountability and alignment in high-impact projects. * Risk & Control Self-Assessment (RCSA): You'll conduct the annual RCSA for all IT risk categories, using the RISK ORM methodology to assess risks, incidents, and recommendations, giving a full picture of IT's risk profile, including external threats. * Regulatory Reporting - IT Risk Questionnaire: You'll coordinate the bank's response to the ECB's IT Risk questionnaire (via Group) and the NBB's BNP Paribas Fortis reporting, ensuring submissions are accurate, regulator-ready, and endorsed by the CISO/CIO. * Compliance Controls Execution: You'll run IT-wide compliance checks (awareness, ethics, etc.), report findings to the IT Management Team, and drive remediation where needed, ensuring actions are documented and evidenced. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Your Manager Doesn’t Come with a User Manual (But You Can Totally Write One)](https://www.wearedevelopers.com/videos/1495-your-manager-doesn-t-come-with-a-user-manual-but-you-can-totally-write-one) - [Developing the Rich Text Editor for DeepL.com](https://www.wearedevelopers.com/videos/1172-developing-the-rich-text-editor-for-deepl-com) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Engineering/Manager Pendulum: Generating compound interest on your career](https://www.wearedevelopers.com/videos/100348-engineering-manager-pendulum-generating-compound-interest-on-your-career) ## Related Articles - [Best Companies in the Netherlands: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/193-best-companies-in-the-netherlands-top-25-companies-in-2023) - [Best Companies to Work For in Paris: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/190-best-companies-to-work-for-in-paris-top-25-companies-in-2023) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [How to land a developer job in Amsterdam](https://www.wearedevelopers.com/magazine/36-how-to-land-a-developer-job-in-amsterdam) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Best Companies to Work For in France: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/189-best-companies-to-work-for-in-france-top-25-companies-in-2023)