ICT Risk Officer / DORA - Banking Sector
Published on 29/12/2025
Austin Bright
- Luxembourg (Canton), Luxembourg
- Finance
Working time
Type of contract
Professional experience
Educational level
Our client, a well-established bank in Luxembourg, is strengthening its Risk Management function and is looking for an ICT Risk Officer to support the bank's ICT, cyber, and operational risk framework, in line with DORA and regulatory requirements.
Your role
As part of the Risk Management Department (2nd line of defence) and reporting to the Chief Risk Officer, you will play a key role in identifying, assessing, monitoring, and reporting ICT and technology-related risks, ensuring regulatory compliance and operational resilience.
Key responsibilities
- Identify, assess, mitigate, monitor, and report ICT, cyber, and operational risks.
- Contribute to the implementation and ongoing improvement of the ICT Risk Management Framework in line with DORA, EBA Guidelines, CSSF requirements.
- Coordinate with IT, Security, Compliance, and business teams (1st line of defence).
- Participate in third-party / outsourcing risk assessments and ICT incident follow-up.
- Contribute to regulatory deliverables such as ICLAAP, Recovery Plan, Pillar III, and ICT-related reporting.
- Monitor risk indicators, incidents, breaches, and remediation action plans.
- Support stress testing activities related to operational and ICT risks.
- Assist the CRO in oversight activities and promote a strong risk and resilience culture within the bank.
Your profile
- Master's degree in Finance, Economics, IT, Risk Management, or a related field.
- 5+ years of experience in ICT Risk, IT Risk, Cyber Risk, or Operational Risk, ideally within banking or financial services.
- Strong knowledge of DORA, EBA Guidelines, CRR/CRD, and CSSF circulars.
- Experience with ICT governance frameworks (ISO 27001, COBIT, ITIL) is an advantage.
- Excellent analytical and communication skills.
- Fluent in English (French or Portuguese is a plus).
- Risk certifications (FRM, PRM, CISM, CRISC) are considered an asset.
Why join?
- Strategic role with strong exposure to ICT Risk & DORA implementation
- International and regulated banking environment
- Long-term stability and career development
- Competitive salary package ( can reach 90k + benefits ) and flexible working conditions
