IT risk expert (m/f) Luxembourg

La Commission de Surveillance du Secteur Financier (CSSF) est un établissement public, responsable de la surveillance de l’ensemble de la place financière du Luxembourg, à l’exception du secteur des assurances.

Role & responsibilities

• Monitor credit institutions' compliance with the various rules applicable in the context of ICT risk
• Participating in and contributing to the work of the competence centre for the supervision of ICT risk matters within Métier Banques
• Assisting the hierarchy and the various analysts of Métier Banques in the execution of our banking supervision duties in relation to ICT risk
• Analysing the various reportings dedicated to or including ICT risk topics
• Performing horizontal analyses on credit institutions’ ICT risk level and control
• Providing in-house training on both technical and regulatory aspects regarding ICT risk

Your profile

• University degree (Bac +4/+5) in information systems and/or economics, finance, business management with an ICT focus
• Proven professional experience of at least 5 years in the field of ICT governance, ICT risk management, IT auditing, or IT security and ideally within the financial sector
• Proven experience and knowledge of relevant regulations
• Strong knowledge of the Digital Operational Resilience Act and its technical requirements related to ICT risk management, ICT incident management, digital operational resilience testing and ICT third-party risk management
• CISA, CISM, CISSP or equivalent certifications are an asset
• Fluency in written and spoken English as well as French and/or German. Knowledge of Luxembourgish is an advantage
• Available to travel abroad
• Excellent writing, analytical, summarising and communication skills
• Flexibility, availability, rigour, organisational skills, initiative and proactivity
• Ability to work independently and as part of a team
• Good interpersonal and interaction skills