Security guard

Information Security Officer for a Support PSF (m/f) in Luxembourg

Empleador: Deloitte Solutions S.A R.L.
Ubicacion: Luxembourg
Puestos: 1
Publicado: 2026-06-15

En que consiste el trabajo

Information Security Officer for a Support PSF Location: Luxembourg, LU Company: Deloitte Luxembourg Job Function: Consulting Services Seniority: Senior levels Contract Type: Open-term Your future team Deloitte Solutions, as a Luxembourg Support Professional of the Financial Sector (PSF), is an EU-regulated company providing managed services to Financial Institutions in collaboration with our network of member firms throughout Europe. Leveraging our Financial, Compliance and Tax operational expertise along with dedicated technology, Deloitte Solutions provides Tax, Regulatory and Transaction Reporting services and AML/KYC managed services. The Information Security Officer supports the Chief Risk Officer and the CISO in the operation of Deloitte Solutions' information security framework and in the oversight of ICT and information security risks. Are you ready to take on this new challenge? Then you should come join us! Your advantages of being one of us • A key position at the crossroads of business, IT and risk within a Luxembourg Support PSF. • Direct collaboration with the CRO, CISO and other control functions, with real impact on our security posture. • Access to Deloitte's methodologies, tools and training programs to develop your information security skills and career. • An inclusive, international working environment with flexible work arrangements in line with firm policies Your contribution to our success You will be the key coordinator for information security and ICT risk topics within Deloitte Solutions. In particular, you will: o Maintain Information security policies and procedures aligned to ISO 27001, CSSF 20/750 and DORA. o Contribute to the ICT risk management framework, covering identification, assessment, mitigation, monitoring and reporting of ICT and security risks. o Coordinate ICT/security incident management and reporting (including major ICT-related incident reporting under DORA). o Monitor and support compliance with relevant regulations and frameworks (e.g. GDPR, ISO 27001, DORA, CSSF requirements). o Oversee that information security controls are applied in accordance with the organization's ISO-aligned policies, procedures and leading practices. o Coordinate or support risk assessments, vulnerability management and penetration testing (incl. multi-annual testing plans, review of results, follow-up of remediation actions). o Contribute to third-party and outsourcing risk management, including security requirements in contracts and review of critical / important ICT service providers in line with CSSF rules and DORA. o Collaborate with and report to the CRO of Deloitte Solutions and to the CISO, and prepare and deliver regular reports on ICT and information security risks, incidents and key indicators to the CISO, CRO and Risk Committee. o Collaborate closely with IT, Cybersecurity Operations team, Risk Management, Compliance, Internal Control and Internal Audit to support a robust control environment, while maintaining an appropriate level of independence from day-to-day IT operations. Your skills • University degree in Computer Science, Information Security, Engineering, or similar; or equivalent professional experience. • Solid experience (4+ years) in information security / ICT risk within financial services, preferably within a Luxembourg PSF, bank, management company, or similar regulated entity. • Knowledge of CSSF 20/750, DORA and security frameworks (ISO 27001/22301, NIST or similar) and leading practices. • Relevant certifications (CISSP, CISM, ISO 27001 or similar) are considered as a strong plus. • Strong organizational and time-management skills, effective stakeholder engagement, and a proactive, autonomous, hands-on working attitude. • Ability to interact and work with senior management (CRO, CISO) and service providers in a clear, pragmatic and risk-based manner. • Strong written communication skills for clear controls documentation and executive risk reporting, proficient in Microsoft