Retour à la liste

ICT Risk Officer - Financial Services - Luxembourg

Luxembourg Region Permanent Télétravail Voir la description du poste
Support the identification, assessment and oversight of technology and information security risks within a Luxembourg financial institution. Working within the second line of defence, you will challenge IT controls, monitor remediation and contribute to stronger operational resilience.

Mise à jour 07/09/2026

  • Shape ICT risk oversight within Luxembourg's financial services sector.
  • Build expertise in digital resilience through cross-functional exposure.

À propos de notre client

  • Our client is a financial services organisation based in Luxembourg.
  • Its activities require effective technology risk management, reliable information systems and robust oversight of external service providers.
  • The position involves close collaboration with Risk, IT, Information Security, Compliance and business stakeholders.



Description du poste

  • Maintain and enhance the ICT risk management framework, policies and procedures.
  • Conduct independent ICT risk assessments covering systems, processes, projects and third-party arrangements.
  • Review and challenge the design and effectiveness of IT and information security controls.
  • Support alignment with DORA and applicable CSSF requirements.
  • Monitor technology risks, control deficiencies and remediation plans, escalating material issues.
  • Develop key risk indicators and prepare clear reporting for management and governance committees.
  • Assess ICT third-party risks and challenge outsourcing assessments and ongoing monitoring.
  • Review significant ICT incidents, root-cause analyses and corrective actions.
  • Provide independent oversight of business continuity, disaster recovery and resilience testing.
  • Contribute to regulatory enquiries and audit responses within the scope of the ICT risk function.



Profil recherché

  • Degree in information technology, cybersecurity, risk management or a related discipline.
  • Relevant experience in ICT risk, IT audit, information security governance or technology risk consulting.
  • Understanding of the three lines model and the responsibilities of an independent risk function.
  • Familiarity with DORA, relevant CSSF expectations and recognised frameworks such as ISO 27001, COBIT or NIST.
  • Ability to assess technology controls and translate technical findings into clear business risks.
  • Strong analytical judgement, structured documentation skills and attention to detail.
  • Confidence to challenge stakeholders constructively and follow remediation through to completion.
  • Fluent English; French or another European language would be an advantage.
  • CISA, CISM, CRISC or comparable certifications would be an asset.



Conditions et Avantages

  • A role with direct exposure to technology risk and operational resilience.
  • Collaboration with specialists across risk, technology, security and compliance.
  • Opportunities to influence control improvements and management decisions.
  • Scope to deepen expertise in financial services ICT risk management.
  • Remuneration and benefits to be specified according to the employer and position level.



Contact
Thomas de Looz
Indiquer la référence de l'offre
JN-092026-7098396

Résumé du poste

Secteur
Banque & Services Financiers
Sous-secteur
Risk Management
Industrie
Financial Services
Où ?
Luxembourg Region
Type de contrat
Permanent
Nom du consultant
Thomas de Looz
Référence de l´offre
JN-092026-7098396
Poste à pourvoir en :
Télétravail

Michael Page s’engage pour l’égalité des chances, en tant qu’employeur ainsi qu’en tant que partenaire pour le recrutement. Toutes les décisions de recrutement que nous prenons sont basées uniquement sur l’expérience et les aptitudes de nos candidat(e)s.