Your key responsibilities
- Develop strong client relationships and identify new business opportunities, while assisting in further development of our technology risk competencies around Digitak Risk and/or Operational Resilience
- Assist in developing “Go To Market” strategies
- Provide guidance, share knowledge and manage team members while participating in solving our client’s most complex questions related to IT Risk Management, both from a strategic and operational point of view.
- Engage with clients to assess and improve their IT GRC frameworks, policies, and procedures.
- Lead risk assessments, compliance audits, and gap analyses for clients across various industries.
- Design and implement IT GRC solutions that align with client business objectives and regulatory requirements.
- Provide expert advice on IT governance, risk management, compliance strategies, and preferably Third-Party Risk Management
- Manage operationally multiple client engagements simultaneously, ensuring high-quality deliverables and adherence to timelines.
- Stay abreast of industry trends, regulatory changes, and advancements in technology that may impact clients' GRC strategies.
Skills and attributes for success
- Bachelor's or master’s degree in information technology, Cybersecurity, Risk Management, or a related field.
- Professional certification such as ISO27001, ISO 22301, ISO 31000, CRISC, CGEIT, CISM, or CISSP is preferred (not mandatory).
- Minimum of 5 years of experience in IT GRC, with a focus on consulting or advisory services.
- Expertise in at least one of the following areas:
- IT Risk Management/Transformation
- IT Governance
- Operational Resilience
- Third-Party Risk Management
- GRC Tooling
- Data risk
- Knowledge and experience with GRC tools such as ServiceNow, AuditBoard, etc are a plus
- Proven track record of delivering high-quality consulting services to clients.
- Strong understanding of IT governance frameworks (e.g., COBIT, ITIL) and risk management methodologies.
- Familiarity with compliance standards and regulations such as ISO 27001, GDPR, DORA, CSSF Circulars, etc.
- Exceptional analytical, problem-solving, and project management skills.
- Excellent communication, presentation, and interpersonal skills, with the ability to engage effectively with clients at all levels.
- Native French or Luxembourgish speaker, with an excellent knowledge of business English.
What we offer you
Our offer of employment is contingent upon the successful completion of a background check and pre-screening requirements. The candidate acknowledges that all information provided must be accurate.