Senior AI IT Risk, Compliance & Operational Resilience Consultant

NextLink is having an existing position as a Senior AI IT Risk, Compliance & Operational Resilience Consultant in Brussels area, Belgium.

General information:

- Start date: ASAP

- Duration: 12 months renewable

- Workload: full time

- Work location: Brussels area, Belgium

The consultant will be responsible for:

• Strengthening the ICT and AI risk management framework within CITO.

• Supporting teams in conducting Business Risk Assessments and identifying operational, cyber,

regulatory, contractual, and fraud risks.

• Defining and monitoring remediation plans in collaboration with stakeholders.

• Contributing to the implementation and improvement of AI governance.

• Ensuring alignment with regulatory requirements related to AI, operational resilience, and outsourcing.

• Advising teams on exit strategies, critical supplier management, compliance controls, and

requirements from the National Bank of Belgium.

• Participating in the development of risk management dashboards and indicators.

• Supporting AI4IT transformation programmes by integrating risk, compliance, resilience, and fraud

prevention dimensions.

Expected deliverables

• AI risk management framework and AI Governance Framework.

• Risk Assessments and risk registers for AI solutions.

• Regulatory impact assessments covering the AI Act, DORA, GDPR, and CRA.

• Remediation plans and control strengthening plans.

• Executive dashboards for risk and compliance monitoring.

• Opinions and recommendations on AI solutions, cloud services, and strategic suppliers.

• Support materials for internal audits, external audits, and regulatory inspections.

Profile:

• Language: English fluent + French fluent or Dutch fluent

• Minimum 10 years experience

• IT Risk, IT Governance

• Operational Risk and compliance

• Audit, internal control, or risk management

• Experience in the financial or insurance sector

• Microsoft suite, including Word, Excel, and PowerPoint

• Understanding of AI and Generative AI technologies.

• Knowledge of the obligations under the European AI Act.

• Experience in identifying and assessing risks related to AI models, training data, LLMs, and AI

services provided by third parties.

• Knowledge of operational resilience and cybersecurity challenges related to AI systems.

• Ability to work with IT, Architecture, Cybersecurity, Data, and Digital teams

• Cloud environments, outsourced services, and ICT risks

• DORA, GDPR, and third-party management frameworks