Chief Information Security Officer

Tasks

• Coordinate internal audits and risk assessments
• Coordinate penetration tests
• Coordinate with compliance risk management and internal audit
• Define AI security and AI risk management governance
• Define cybersecurity strategy and policy
• Deliver ICT reporting to Board and CSSF
• Design ICT risk management framework
• Draft information security policies
• Ensure pci dss compliance
• Ensure strong customer authentication
• Implement information security procedures
• Lead IT projects for migrations and integrations
• Lead security awareness training
• Maintain ICT third party register
• Maintain business continuity and disaster recovery plans
• Manage IT vendor relationships and SLAs
• Manage digital operational resilience testing
• Manage regulatory compliance for new EU jurisdictions
• Manage security incident detection response and notification
• Oversee access management and data protection
• Oversee cloud IT infrastructure and service providers
• Oversee payment system security
• Represent entity during CSSF supervisory reviews

Perks/Benefits

• Annual team gatherings
• Bi Weekly Office Gatherings
• Equity options
• Hybrid work
• Medical insurance
• Mental health insurance
• Paid Medical And Mental Health Coverage
• Personal Time Off

Skills/Tech-stack

API Security | AWS | Access Management | Audit Coordination | Business Continuity | Business Continuity Planning | CSSF Circular 25 880 | Cloud Computing | Cloud Security | Continuity planning | Customer authentication | Cybersecurity | DORA | Data Protection | Digital operational resilience | Digital operational resilience testing | Disaster Recovery | Forensics | Google Cloud | ICT RISK | ICT Risk Management | ISO 27001 | Incident Management | Incident Response | Information Security Governance | Information security | Microsoft Azure | NIST | Open Banking | Operational Resilience | Operational Resilience Testing | PCI DSS | PSD2 | Payment system security | Penetration Testing | Resilience testing | Risk Assessment | Risk Management | SEPA | SOC oversight | Security Governance | Security incident | Security incident response | Service Level | Service Level Agreements | Strong Customer Authentication | Swift | System security | TIBER-EU | Third Party | Third-Party Risk | Third-party risk management