IT Program Lead Manager - IAM and ISMS Compliance Luxembourg

Job Description:

You will be in charge of management and execution of IT Amelioration program. Also involved in leading complex transformation projects by transferring project results into regular line business and ensuring a smooth handover to Business-as-usual.

• Establish risk guidelines for the information security strategy of the client

• Contribute to defining the compliance rules related to Information Security Strategy.

• Establish guidelines for the design of the information security controls

• Align the client's risk appetite for security incidents and vulnerability management

• Monitor and review the management of security events, incidents, and vulnerabilities upon their conclusion

• Establish an Identity and Access Management (IAM) policy, review the implementation of the controls and conduct periodic reviews of user access

• Participate in the planning of IT security assessments and review the status of the follow-up actions

• Design and perform regular IT access review and implementation of IT controls

• Perform periodic reviews of the information security risk assessments conducted for prospective service providers and the risk assessments conducted pursuant to the Outsourcing Policy

• Establish information compliance and security rules which are reflected in Information Security Policy

Qualifications

Requirements:

• University degree in the field of IT risk and compliance management, Computer Sciences or related disciplines

• Minimum 8 years of relevant experience in managing large scale and highly complex projects/programs in Information security or related activities

• Proven track record of success in information security implementation, information security audit, preferably in a financial services domain

• Proven ability to effectively assess and mitigate program risks, issues and dependencies of a complex program

• Experience in effectively communicating with and positively influencing diverse stakeholders and team

• members

• experience with Deutsche Boerse Group will be greatly apprciated

• Experience in Information Security Policy implementation and maintenance

• Knowledge of relevant ISO standards (e.g. ISO/IEC 2700x)

• Technically expert in information security with a strong understanding of industry best practices and regulations

• Knowledge of principles and techniques of information security risk analysis and assessment

• Experience in developing and implementing monitoring, performance, and reporting metrics

• Strong written and verbal communication skills

• Fluency in English

Our offer:

A particularly attractive salary package, with many additional benefits, to attract the best of you. A professional and stimulating work environment in the field of telecommunications. Multiple career opportunities within a changing group, advanced training in new technologies, rich and recognized expertise. Your application will be treated with confidentiality. We would be very happy to organize a first appointment to talk to you about this opportunity and consider your next career development. Send us your CV.