Title:  Manager, Cyber Risk and Regulation (CISO agenda)

What you will work on:

As a (Senior) Manager in our Cyber Risk and Regulation practice, you will lead complex, multi-workstream engagements on the CISO agenda for regulated clients. You will help clients implement NIS2 and DORA, strengthen third-party risk management, and improve operational and cyber resilience by translating regulatory expectations into practical operating models, controls and transformation roadmaps.

• Own complex cyber risk and regulatory programmes end to end, including scope, delivery plan, budget, milestones, team, quality, risks and escalations.
• Act as a trusted counterpart to CISOs, CIOs, management committees and audit committees, translating regulatory and technical issues into clear business decisions.
• Lead NIS2, DORA, CyFun and operational-resilience transformation and remediation engagements for regulated and critical-sector clients.
• Translate regulatory requirements into implementable target operating models, governance arrangements, control frameworks, roadmaps and performance measures.
• Lead cybersecurity maturity assessments and risk analyses using frameworks such as ISO 27001 and NIST CSF, and defend recommendations with senior stakeholders.
• Contribute commercially through proposals, client relationships and the development of new opportunities.
• Coach and develop multidisciplinary teams and ensure consistently high-quality deliverables.

What do you need:

• At least 6 years of experience in cyber risk, security governance or cybersecurity consulting, including at least 2 years leading engagements or teams.
• Demonstrable depth in at least two of the following: NIS2, DORA, CyFun, ISO 27001, NIST CSF or operational resilience.
• Proven accountability for programme delivery, including budgets, milestones, teams, dependencies and escalations.
• Strong judgement and presence, with the ability to hold a room of senior stakeholders and defend a clear position.
• A Master’s degree or equivalent professional experience.
• Relevant certifications such as CISM, CISSP, CRISC or ISO 27001 Lead Implementer are an advantage.
• Experience with Belgian financial services or NBB, FSMA or ECB supervisory expectations is an advantage.
• Fluency in English and either Dutch or French, and eligibility to work in Belgium without sponsorship.
• Comfort with a client-facing, chargeable consulting environment and an active contribution to proposals and client development.

#LI-DNI

As a certified Top Employer we offer:

• An attractive remuneration package with a great number of extra-legal benefits (premium electric company car + charging card, net allowances, bonus, a mobile phone with subscription, and many other benefits tailored through our cafeteria plan).
• Flexible work arrangements to ensure a healthy work-life balance and the possibility to work from anywhere 20 days per year.
• A comprehensive insurance package including group insurance with full KPMG contributions, hospitalization insurance and optional outpatient options (dental & eye care, medical consultations and registered medication).
• Career development opportunities combined with trainings based on your personal goals and aspirations.
• We care about you. With initiatives such as confidential counselors, an employee assistance program, hotlines and more, we will support your emotional and mental health throughout your career.
• An inclusive, international culture where personal growth, mutual trust and lifelong learning is fostered.
• Great team building activities and sport & wellbeing events (Brussels Marathon, Antwerp 10 Miles, 1000 kilometers for KOTK, river clean-ups, and many more…) through our Together@KPMG & KPMG Foundation programs.