Data Protection
Governance, Risk & Compliance Squad Lead
Division: Chief Information Security Office (CISO)
As a global critical financial infrastructure, the protection of Euroclear information andassets is fundamental to the company’s business. Information Security is at the core of our services, firmly embedded in the management systems and processes of the company. You will be joining our Chief Information Security Office in charge of putting in place the required controls to adequately and effectively protect our information assets.
About the team
The Data Protection Services tribe protects Euroclear’s data asset from leak, loss or tampering by ensuring to have a clear view of all our data being classified by business critically and sensitivity with corresponding controls defined, operated and monitored and have the right mindset promoted to all Euroclear staff.
Your role
As Data Protection Governance, Risk and Compliance Squad Lead you will oversee all activities aiming at data security, data classification supporting Data Management Office and GDPR services supporting Data Protection Office.
Your responsibilities & duties
1. Manage a team of Functional Experts (Product Owners and Security Analysts).
2. Oversee the standards aligned with governance, risk frameworks and capabilities.
3. Lead to change to set new standards by deploying advanced data security services.
4. Streamline day-to-day activities, delivery and predictability of projects.
5. Work with PMO and HR to ensure the squad is staffed with adequate capacity and skills.
6. Create conditions that empowers team members to grow expertise and reach full potential.
7. Collaborate with CISO teams, Data Office, Compliance, IT to develop end to end processes.
8. Deploy the DP strategy aligned with business, IT and Information Security Strategies.
9. Address the challenges of cloud adoption and emerging technologies (AI, Quantum Computing).
10. Report to the Tribe Leader and governance bodies on KPI, KRI and project progress.
Your qualifications required
Mandatory:
11. IT security professional with proven experience in cybersecurity, application security, data security and/or data protection.
12. Experience in data access governance, data management and classification.
13. Experience in building governance and compliance frameworks.
14. Knowledge of standard control frameworks like IEC/ISO 27001 & 27002, NIST Cybersecurity Framework, Centre for Internet Security (CIS), COBIT…
15. Knowledge of industry and regulatory frameworks like IEC/ISO 27701, GDPR, DORA, NIS2, EBA Guidelines, FISR, CSDR, SWIFT…
Nice to have:
16. Experience in control efficiency assessment, internal control or internal audit.
17. Experience in Personal Data Protection (GDPR or other regulations).
18. Practice of Data Access Governance and Data Security Posture Management solutions.
19. Cybersecurity certifications like CISSP, CISM, CCSP, SANS…
Will be considered an asset:
20. Practice of regulator relationship management (NBB, BoE, BdF…).
21. Practice of risk analysis using frameworks like IEC/ISO 27005, IRAM2, EBIOS, MONARC…
22. Practice of solutions like Collibra, ServiceNow GRC / CMDB.
Interpersonal Skills:
23. Strategic mindset to see beyond immediate issues and keep focus on the bigger picture.
24. Strong communication skills and ability to adapt posture to the audience.
25. Facilitation skills that promote effective cross-functional collaboration.
Proficient oral and written communications skills in English
#LI-NS1