IT Risk & Compliance Officer (m/f)

Mission

Within the framework of the development and maintenance of the CSSF’s information systems, the “CSSF Information Systems” department wishes to recruit a IT Risk & Compliance Officer.

Role & responsibilities

  • Management of IT risk mapping
  • Assessment of compliance with policies, standards and regulations by carrying out risk assessments, controls and drafting action plans
  • Review, design and deployment of IT risk management systems and associated controls
  • Creating, updating and managing IT department procedures/policies
  • Management of internal and external IT audits (IT point of contact for auditors)
  • Management of IT activities relating to the RGPD
  • Participation in the CSSF continuity management program (BCP)

Your profile

  • University degree (BAC + 4 / BAC + 5) with a specialization in information systems management and/or security
  • At least 3 years' experience in an IT services company, network/security integrator or risk management consultancy in one or more of the following areas: IT compliance, IT risk management, Business Continuity, IT Audit
  • Understanding of risk management and treatment frameworks
  • Strong technical knowledge of information technology systems and infrastructure
  • ITIL, CISM, or CISSP certifications are required
  • Knowledge and experience of regulatory frameworks and compliance standards such as COBIT, ISO27K, etc
  • Knowledge of relevant laws and regulations related to data privacy (RGPD)
  • Experience of working and collaborating effectively with cross-functional functions such as Internal Audit or Risk Management
  • Good writing, analytical and summarizing skills in the creation and updating of high-quality documentation relating to IT processes
  • Fluency in French and English is mandatory. Fluency in Luxembourgish and German is an asset.
  • Knowledge of the financial sector will be considered an additional asset

The successful candidate (m/f) will be hired as public employee (“employé de l’Etat”) under a permanent contract. If the candidate meets the required conditions, s/he will be asked to apply for admission to the status of civil servant (“fonctionnaire de l’Etat”).

Prior to the conclusion of the contract, the candidate must submit an extract from the criminal record (bulletin n°3), dated less than 2 months, in order to prove their conduct and integrity.

Apply now

* Required fields