Deputy Chief Information Security Officer - AlphaCredit (H/F/X)

AlphaCredit is the market leader in consumer loans in Belgium and Luxembourg and is part of the BNP Paribas group. From our office, within walking distance of Brussels Central station, we offer all possible credit solutions through our professional partners or directly to customers.  Present for over 30 years, our experience allows us to realize the dreams of thousands of clients with a responsible approach.

Your role :

As the Deputy CISO, you will act as the strategic second-in-command to the CISO,   supporting the execution of cybersecurity and information security strategy of PF Benelux while preparing to assume the CISO role in the medium term. The successful candidate will provide high-level support in managing the organization's information security posture, overseeing security governance, and managing risk. This is a succession-track role: the Deputy CISO will be mentored by the current CISO to eventually assume full responsibility for the CISO function.

You will oversee day-to-day security operations, help in driving compliance with regulatory requirements (e.g., DORA, GDPR, EBA/ECB guidelines), and ensure alignment with the BNP Paribas Group’s security framework.

This role requires a balance of technical depth, leadership, and business acumen to engage with senior stakeholders (e.g., Executive Committee, Risk, CIO , Legal) and foster a culture of security awareness across the company.

At term, you will lead the IT Risk & Security team that is responsible and accountable for the full scope of IT Risk and Security activities.  

Key Responsibilities

• Strategic Support & Succession
  1. Executive Partnership: Act as the primary deputy to the CISO in executive meetings, steering committees, and board presentations.
  2. Succession Readiness: Undergo a structured transition period to gain full visibility into all CISO responsibilities, stakeholders, and strategic roadmaps.
  3. Delegated Authority: Assume full leadership of the security function in the absence of the CISO.
  4. Drive regulatory compliance (e.g., NIS2, DORA, PSD2, GDPR) and internal audits/assessments, ensuring timely remediation of findings.
• Operational Leadership
  • Security Governance: Support the development and enforcement of information security policies, standards, and procedures.
  • Program Management: Oversee the execution of the annual cybersecurity roadmap, ensuring initiatives are delivered on time and meet security objectives.
  • Cybersecurity operations:
    • Incident Response: Support the CISO in managing high-priority security incidents and coordinating the response across technical (including SOC/CSIRT teams) and business teams.
    • Vulnerability management (prioritization, patching, risk acceptance).
    • Ensure the compliance of Identity & Access Management (IAM) and Privileged Access Management (PAM).
    • Drive the third-party technology risk management (vendor security assessments, contractual clauses).
  • Oversee the IT- continuity and resilience activities (e.g., disaster recovery, crisis management) in cooperation with the ICRO.
• Risk & Compliance Management

  • Act as the primary contact for regulators (e.g., NBB, ECB, FSMA) and external auditors on security matters.

  • Lead risk assessments and ensure mitigation plans are executed.
  • Report ICT risks to executive committees.
  • Monitor emerging threats (e.g., AI risks, quantum computing) and propose adaptive controls.

Your profile :

Must-Have

Proven Track Record: 

• Extensive experience in cybersecurity leadership, preferably in a Deputy CISO, Security Manager, or similar senior role. 7+ years in cybersecurity, with 2+ years in leadership roles.
• Proven experience in financial services (banking/insurance preferred) with knowledge of regulatory frameworks (DORA, GDPR, …).
• Domain Expertise: Deep knowledge of security frameworks (e.g., NIST, ISO 27001, SOC2) and current threat landscapes.

Technical expertise in:

• Be a cybersecurity generalist instead of highly-specialized profile

• Security architectures (zero trust, network segmentation, encryption).
• Identity and Access Management (role-based access control)
• Vulnerability management and prioritization

• Application security (e.g. OWASP top-ten)

• Incident response & forensics (SIEM, XDR, threat hunting).

Leadership & Soft Skills

• Strong stakeholder management: Ability to translate technical risks into business impact for non-technical audiences.
• Communication: Excellent verbal and written communication skills, with the ability to influence at all levels of the organization.
• Resilient under pressure (e.g., during incidents or regulatory scrutiny).
• Fluency in English + Dutch/French (written/spoken); ability to draft policies and report in multiple languages.
• Capability to lead a team and to instill cybersecurity values to the team.

Nice-to-Have

• Knowledge of BNP Paribas Group’s security policies or similar large-scale banking environments.
• Executive presence: Comfortable representing security at Board level.
• Relevant certifications (e.g., CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor).

Soft Skills

• Strategic thinker with a pragmatic, risk-based approach.
• Capability to switch to different cybersecurity topics
• Change agent: Ability to drive cultural shift toward security-by-design.
• Mentorship mindset: Willingness to develop teams and prepare for CISO succession.

Our offer : 

• Clear path to CISO role with structured transition planning.
• Exposure to senior leadership and high-impact decision-making.
• Central, strategic, position in the organization in the management of cyber threats.
• Cutting-edge security environment with investment in innovation (e.g., AI, threat intelligence)

• Rewarding function in a flexible working environment.
• Many training opportunities to continue developing your knowledge and skills.
• Permanent contract in a continuously evolving company within the solid BNP Paribas Group.
• Competitive salary with a wide range of extra-legal benefits (insurance, meal vouchers, extra-legal days off, etc.).

Promoting access to more responsible and sustainable consumption to support our clients and partners.

Leader in consumer credit in Belgium and Luxembourg, AlphaCredit is part of the BNP Paribas Group. We offer a full range of credit solutions through our professional partners

AlphaCredit is committed to promoting an inclusive and respectful work environment, where every individual is valued without distinction of race, gender, age, religion, sexual orientation, disability or any other characteristic protected by law.

Any form of discrimination is strictly prohibited by our code of conduct.