IT Risk & Compliance Officer (m/f)

Role & responsibilities

• Management of the IT risk map
• Evaluate compliance with policies, standards and regulations by conducting risk. assessments, controls and drafting action plans
• Review, design and deployment of IT risk management systems and associated controls
• Incident Management and Problem Management
• Creation, updating and management of IT department procedures/policies
• Management of internal and external IT audits (IT point of contact for auditors)
• Management of RGPD-related IT activities
• Participation in the CSSF continuity management program (BCP).

Your profile

• University degree (BAC + 4 / BAC + 5) with a specialization in information and security systems management and/or compliance and IT risk management
• Minimum of 3 years' experience in an IT services company, at a network/security integrator or risk management consultancy in one or more of the following areas: IT compliance, IT risk management, Business Continuity, IT Audit
• Understanding of risk management and treatment frameworks
• Business Analyst experience is an asset
• Experience of working and collaborating effectively with the Risk Management function
• Strong technical knowledge of information technology systems and infrastructure
• Knowledge and experience of regulatory frameworks and compliance standards such as ISO27K, NIS2, etc
• Knowledge of relevant laws and regulations related to incident response and data privacy
• Good writing, analytical and summarizing skills especially regarding IT process documentation
• Fluency in French and English is mandatory. Fluency in Luxembourgish and German is an asset
• Knowledge of the financial sector will be considered an additional asset.

The successful candidate (m/f) will be hired as public employee (“employé de l’Etat”) under a permanent contract. If the candidate meets the required conditions, s/he will be asked to apply for admission to the status of civil servant (“fonctionnaire de l’Etat”).

Prior to the conclusion of the contract, the candidate must submit an extract from the criminal record (bulletin n°3), dated less than 2 months, in order to prove their conduct and integrity.