Introductie
IT Risk Consultant – Business Continuity & Operational Resilience (BCP / BIA / DRP)
Context & Objective
To strengthen its Governance, Risk & Compliance (GRC) framework and support compliance with
regulatory and industry standards, our client is looking for an experienced IT Risk Consultant
with expertise in Business Continuity Planning (BCP), Business Impact Analysis (BIA), and
Disaster Recovery Planning (DRP).
The consultant will support both Business and IT teams in assessing critical business activities,
enhancing operational resilience, and integrating information security requirements into
business processes.
The consultant will join the IT Governance, Risk & Compliance (IT GRC) team and report directly
to the IT Risk Manager. Acting as the primary point of contact between IT and business
stakeholders, the consultant will contribute to regulatory compliance, business continuity, and
enterprise risk management initiatives.
Organisatie
Key Responsibilities
Business Impact Analysis (BIA)
• Organize and facilitate BIA workshops with Business and IT stakeholders.
• Support the identification of critical business processes, dependencies, business impacts,
and recovery requirements.
• Define, validate, and document key recovery metrics, including:
o Recovery Time Objective (RTO)
o Recovery Point Objective (RPO)
o Maximum Tolerable Downtime (MTD)
• Produce and maintain comprehensive BIA documentation.
Business Continuity & Operational Resilience
• Contribute to the development, improvement, and maintenance of Business Continuity
Plans (BCP) and Disaster Recovery Plans (DRP).
• Ensure consistency between BIA outcomes and existing continuity plans.
• Support the definition and enhancement of continuity and recovery strategies.
Governance, Risk & Compliance (GRC)
• Assist Business and IT departments in integrating information security requirements into
operational processes.
• Support the continuous improvement of the IT Governance, Risk & Compliance
framework.
• Contribute to regulatory and compliance initiatives, particularly in relation to DORA and
ISO 27001 requirements.
Documentation Review
• Review and update policies, procedures, standards, and related documentation.
• Ensure documentation remains aligned with regulatory requirements, industry
standards, and internal governance practices.
Audit Follow-up
• Monitor and coordinate remediation actions resulting from internal and external audits.
• Collaborate with stakeholders to ensure timely implementation of corrective actions.
• Prepare and provide evidence required for the closure of audit action plans.
Functie
Deliverables
The consultant will be expected to deliver, including but not limited to:
• Completed and validated Business Impact Analysis reports.
• Workshop and meeting minutes.
• Updated policies, procedures, standards, and supporting documentation.
• Audit remediation action plans and follow-up documentation.
• Detailed project planning and activity tracking.
• Regular progress reports.
Required Profile
Functie-eisen
Soft Skills
• Pragmatic, solution-oriented mindset.
• Strong analytical and problem-solving skills.
• Ability to communicate effectively with both business and technical stakeholders.
• Excellent workshop facilitation and change management skills.
• Strong written and verbal communication skills.
Technical Skills
• Proven experience conducting Business Impact Analyses (BIA).
• Strong expertise in Business Continuity Management (BCM).
• Solid understanding of Risk Management and Governance, Risk & Compliance (GRC)
practices.
• Good knowledge of ISO 27001.
• Understanding of the DORA (Digital Operational Resilience Act) framework and
operational resilience principles.
• Experience managing audit findings and remediation activities.
Languages
• Fluent French.
• Fluent Dutch.
• English is considered a strong asset
Aanbod
Contract Details
• Preferred start date: 1 September 2026 (or as soon as possible)
• Duration: Until 31 December 2026 + Extension is possible
• Workload: Full-time
• Location: Hybrid, with onsite presence according to company policy.
Inlichtingen
cindy.yaramis@3d-ict.be