Risk, ALM & Actuary Information Risk Officer Brussels

Our organisation

Ageas is a listed international insurance Group with a heritage spanning of 200 years, offering Retail and Business customers Life and Non-Life insurance, and is also engaged in reinsurance activities.

As an international insurance company, Ageas concentrates its activities in Europe and Asia through a combination of wholly owned subsidiaries and long-term partnerships with strong financial institutions and key distributors.

Ageas ranks among the market leaders in the countries in which it operates. It represents a staff force of about 50,000 people and reported annual inflows of over EUR 18,5 billion in 2024.

Ageas aims to be a Great place to Grow for all its people, while always staying true to its four values: care, share, deliver and dare. It fosters an inclusive culture, that values diversity and encourages everyone to get the best out of their talents.

Ageas has been re-certified as Top Employer in 2026
.

The vibrant Ageas Corporate Centre in Brussels is home to a variety of Group level functions including, amongst others, Risk, Finance, Legal & Compliance, Investor Relations, Human Resources, Strategy, Business Development and Corporate Communications. It sets out the long-term strategy for Ageas and coordinates numerous initiatives across the Group to help realise the strategic ambitions. The Corporate Centre also facilitates knowledge and skills sharing amongst its local operating entities and JV’s, creating strong connections and leveraging on local strengths.

It represents the Ageas Group towards external parties, managing relations with analysts, retail and institutional investors, regulators, rating agencies and the media.

Information Security & Data Management department is part of the Enterprise Risk Management and is playing an important role in identifying and assessing information security and data protection risks as well as providing advises on the risk treatments including risk mitigations supporting achievements of the Ageas strategic objectives.

To strengthen the team, we are looking for an Information Risk Officer.

The Information Risk Officer supports Ageas CISO & DPO in managing and enforcing the Ageas Group Information Security and Data Protection Framework, monitors the Framework implementation at Ageas Corporate Center and assures coordination with the local companies.

You are responsible, among others, for:

• Supporting the alignment of the Information Security Strategy with business objectives and assisting in monitoring of its implementation
• Helping to maintain and update the Group Information Security & Data Protection Framework
• Contributing to the oversight of the Ageas Corporate Center Information Security Management System (ISMS) and supporting compliance with ISO 27001 controls, including second line testing
• Assisting in performing third-party security risk assessments
• Contributing to the monitoring of security incidents and supporting to the maintenance of the Ageas Digital Operational Resilience Framework
• Monitoring Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) related to the ISMS effectiveness
• Actively contributing to the Information Security & Data Protection awareness initiatives and training activities
• Supporting the deployment and maintenance of tools that support Information Security and Data Protection risk management
• Acting as a Subject Matter Expert promoting knowledge sharing, supporting the communities and bringing expertise to the local companies
• Following up on open actions and audit recommendations
• Assisting in monitoring compliance with relevant laws and regulations
• Supporting evaluation of emerging information security threats and trends by gathering information and proposing initial observation

• You have at least Batchelor degree in Business Management, Economics, Mathematics, Informatics or equivalent by experience
• You have 3 - 5 years of relevant experience, ideally within Information Security, risk management or consultancy environment, relevant certification(s) are an asset but not required
• You have a foundational understanding of Information Security risk management concepts and are eager to…