Information Security Officer

About the role

The Information Security Officer will lead the implementation and enforcement of security policies across the organization’s IT landscape. This senior position works closely with technical teams, business units, and external auditors to ensure a robust security posture.

Key responsibilities

• Apply and enforce the information security policy throughout the entire IT environment.
• Conduct periodic security controls such as access reviews, configuration checks, and patch compliance verification.
• Plan, coordinate, and follow up on penetration tests and vulnerability scans, tracking non‑conformities and remediation actions.
• Interact with the Security Operations Center (SOC) and manage security‑related ticketing.
• Define and monitor security KPIs to assess performance and maturity of the information system.
• Identify security gaps against internal and external standards and drive continuous improvement initiatives.
• Recommend and implement security solutions (authentication mechanisms, API security, encryption, network segmentation, etc.).
• Support IT and business projects with risk analysis, secure architecture, and compliance checks.
• Coordinate internal, external, and regulatory audits (ISO 2700X, GDPR, DORA, CSSF circulars).
• Manage the full lifecycle of digital certificates and ensure secure exchanges with clients and partners.
• Contribute to incident management, threat monitoring, and reporting for the CISO and stakeholders.

Required profile

• Minimum 5 years of experience in an information security role.
• Strong knowledge of security frameworks (ISO 2700X, NIST, CIS Controls) and relevant regulations (GDPR, DORA, CSSF circulars).
• Proven ability to identify improvement opportunities and lead remediation initiatives.
• Excellent analytical skills, rigor, autonomy, and the capacity to communicate with both technical and non‑technical audiences.

Required skills

• SIEM
• EDR
• MFA
• IAM/PAM
• DLP
• SonarQube
• Nexus