Tribe Risk Officer - AI (M/F/D)

We are looking for a Tribe Risk Officer to support a Tribe focused on Artificial Intelligence. You will help the Tribe spot, structure, prioritize and reduce technology, operational, regulatory and AI-related risks.
Your main goal: turn risk findings and recommendations into clear action plans that teams can actually deliver, track and govern. You will be the link between Risk Management, Information Security, Architecture, Delivery and Business teams, making sure every risk ends up with a realistic, prioritized and measurable roadmap.
What you will do :
Analyze and challenge findings raised by Internal Audit, Information Security, Risk Management, Architecture reviews and external assessments
Group scattered observations into clear risk themes, remediation streams and implementation plans
Define practical mitigation actions in line with architecture, security, operational and regulatory requirements
Turn risk statements into concrete backlog items, epics and delivery plans
Work with squads, architects, product owners and Tribe leadership to get remediation work done
Make sure fixes tackle root causes, not just symptoms
Follow progress, dependencies, residual risks and target dates
Run quarterly risk review meetings to track audits and risk closure
Report on risk posture and risk reduction to Tribe management and governance bodies
Support audits, regulatory reviews and control assessments
Contribute to AI governance, operational resilience and regulatory compliance where relevant
Act as the Tribe's single point of contact for risk governance
Help build a strong risk management culture across the Tribe
Minimum 5 years in IT Risk, Operational Risk, Cybersecurity, Technology Governance or Technology Transformation
Proven experience managing complex remediation programs with many stakeholders
Experience turning audit findings and risk assessments into actionable delivery plans
Strong background in Operational, IT and Cyber Risk Management
Experience in Agile organizations (Tribes, Squads, Chapters)
Solid understanding of software delivery, DevSecOps and cloud environments (SaaS, public cloud, enterprise platforms)
Knowledge of security frameworks and control environments
Experience in change management, release management and operational governance
Experience in large, complex organizations and cross-functional transformation initiatives
Experience leading workshops and aligning stakeholders
Nice to have :
Experience in AI Governance, Model Risk Management or Responsible AI
Familiarity with NIST AI RMF, the EU AI Act or similar frameworks
Experience in banking, insurance or financial services
Experience with regulatory inspections, internal audits or supervisory reviews
Education :
Bachelor's or Master's degree in IT, Engineering, Cybersecurity, Risk Management or equivalent experience
Certifications (an asset) :
CRISC, CISA, CISSP, ISO 27001 Lead Implementer / Lead Auditor, PMP, Prince2 or Agile certification, ITIL Foundation
Languages :
English: fluent
French or Dutch: a plus
Your profile :
Strong analytical and problem-solving skills, and the ability to turn ambiguity into clear action plans
Excellent communication and influencing skills, able to challenge constructively and build consensus
Results-oriented, with a strong sense of ownership
Able to work independently while driving collaboration across teams
Clear, concise writing for executive-level reporting
Comfortable in a fast-moving, complex environment
Happy to mentor and coach teams on risk management practices

Employment type
Full-time

Work arrangement
No