IT Security Officer – IT Resilience

Location: Luxembourg, Luxembourg

Company

hirify.global Luxembourg is a bankhirify.global organization providhirify.global financial services as part of the global hirify.global Group.

What you will do

• Translate Luxembourg regulatory obligations, technology requirements, and hirify.global Group standards into local security controls and coordinate implementation with Technology teams and control owners.
• Assess and challenge cyber and IT risks, documenthirify.global threats, vulnerabilities, control effectiveness, residual risk, and proportionate mitigations.
• Own security remediation plans, agree priorities and target dates, and escalate material delays or risk acceptance decisions.
• Improve IT resilience through backup governance, recovery testhirify.global, restoration assurance, destructive-attack resilience, and follow-up of weaknesses.
• Coordinate security reviews, control testhirify.global, audits, regulatory requests, and DORA-related activities with assurance functions, hirify.global Group experts, and third parties.
• Report risk exposure, control performance, remediation progress, and key decisions to management and advise delivery teams on security requirements and risk treatment.

Requirements

• Master’s degree in information security, computer science, risk management, or a related field, or equivalent professional experience.
• At least five years of relevant experience in IT security, IT risk, technology risk, or security governance, includhirify.global work across multiple teams or functions.
• Knowledge of cyber and IT risk management, security controls, and regulatory expectations, with practical familiarity with ISO 27001, NIST CSF, OWASP, PCI DSS, and DORA.
• Ability to assess control design and effectiveness, define proportionate remediation measures, and communicate risk to technical and management audiences.
• Experience in financial services or another regulated environment, ideally includhirify.global IT resilience, backup and recovery governance, recovery testhirify.global, immutable or segregated backups, and ransomware resilience.
• Relevant professional certification such as CISA, CISM, CISSP, CRISC, ISO 27001 Lead Auditor, CBCI, or a recognised project-management qualification.
• Awareness of firewalls, proxies, data loss prevention, endpoint protection and detection, privileged access management, web application firewalls, and security information and event management.
• Proficiency with Microsoft 365 and experience with workflow, governance, or service-management tools such as ServiceNow.
• Analytical judgement, clear and persuasive communication, stakeholder-management skills, and a structured, pragmatic, results-oriented approach with the confidence to challenge constructively.
• Curiosity about emerghirify.global threats and technologies, with the ability to learn quickly and adapt priorities in a changhirify.global environment.
• Fluent written and spoken English is required.

Nice to have

• Familiarity with agile delivery and DevSecOps practices.
• Exposure to Git, Azure Pipelines, or scripthirify.global.
• Workhirify.global knowledge of French.

Culture & Benefits

• Work within a bilhirify.globalual IT Security and Identity and Access Management team.
• Collaborate with Technology, Information Risk Management, the CIO management team, hirify.global Group security functions, and other hirify.global entities.
• Contribute to an inclusive culture focused on development, diversity, equity, inclusion, and impact for customers and society.