Arendt is recruiting for our Technology department, Arendt Digital Services.
(Senior) IT Risk & Control Officer
As a (Senior) IT Risk & Control Officer, you will act as ISMS manager and deputy of the head of IT security and risk officer, implementing and overseeing risk & control in a multi‑tenant shared services environment.
Your role
Lead Information Security Management System (ISMS) activities within IT organization:
* ISMS implementation and improvement plan
* ISO27001 internal audit and annual certification
* Maintain up‑to‑date ISMS documentation (policy, process and procedure documents)
* Define and review IT security framework
* Maintain IT global registers mandatory for ISO 27001
* Feed KPIs/KRIs and data points to relevant governance bodies
Lead recurring controls activities:
* Define recurring annual controls plan and pilot execution as a program manager, reporting findings and remediation plans to appropriate committees
* Collaborate with IT managers to improve security controls
* Lead annual testing plan, identity and access management audit plan and penetration testing plan
* Support CISO team and business risks community for compliance conformity assessment and due diligence exercise
Business support activities:
* Support CISO team and business risks community for compliance conformity assessment and due diligence exercise
* Act as the primary contact point for DPO and support the DPO’s team for GDPR activities
Operational cyber security activities:
* RFF validation: maintain and review RFF validation process, validate ITSM tickets related to security
* Problem management: assist problem manager to identify security weaknesses and define remediation plan
Security by design activities:
* Lead third‑party assessment analysis for projects requiring outsourcing
* Act as project manager and lead IT security improvement projects
* Perform risk assessments for IT or business projects
Your profile
* Bachelor’s or master’s degree in business informatics, information/security systems or related field
* Sound experience (advisory included) in IT security with previous roles such as ITSO, CISO or IT security auditor
* Strong knowledge of cybersecurity frameworks (CIS, NIST, ISO27001…)
* ISO 27001 Lead Implementor or ISO 27001 Lead Auditor certification
* Experience in IT operations and security operational management
* Strong interpersonal, communication and problem‑solving skills with a proactive, organized, customer‑oriented attitude
* Team player able to work autonomously
* Fluency in English and French, both spoken and written
Technical skills
* Project management
* ITIL processes and ISMS management
* Threat intelligence and analysis
* DORA, GDPR and CSSF circulars (20/750, 22/301; 22/806)
* Knowledge of cloud environments and/or shared services center is an asset
* Proficient with IT security solutions such as firewall, WAF, proxies and endpoint security
Arendt promotes equal opportunities and values each employee for what they bring to the community. For more information, please refer to our diversity and inclusion policy on our website.
The selected candidate will be required to provide a criminal record (or certificate of good conduct).
#J-18808-Ljbffr