IT GRC Analyst – Regulatory FinTech Platform

About the role

We are looking for a sharp IT Governance, Risk & Compliance (GRC) Analyst to act as the bridge between strict European regulations and high‑velocity global engineering. Reporting to the Luxembourg Head of IT, you will ensure our regulated fintech platform is compliant, resilient, and audit‑ready.

Key responsibilities

• Maintain and evolve the IT Risk Register, aligning risks with the company’s appetite.
• Drive local implementation of the DORA framework, including ICT risk management and incident classification.
• Draft, review, and update IT policies and procedures to bridge technical reality and regulatory policy.
• Perform periodic control testing to verify global engineering practices meet local requirements.
• Support ICT due diligence, monitor vendor SLAs/KPIs, and assist the Outsourcing Manager with third‑party oversight.
• Oversee Identity & Access Governance, conduct user access reviews, and enforce segregation of duties and least‑privilege principles.
• Act as primary liaison for Internal Audit, prepare technical inputs for CSSF notifications, and monitor GDPR/Data‑Privacy controls.
• Coordinate Business Continuity and Disaster Recovery testing documentation and reporting.
• Manage IT incident management process, ensuring proper classification, root‑cause analysis, and regulator reporting.

Required profile

• Bachelor’s or Master’s degree in Information Systems, Computer Science, or a related field.
• Strong understanding of European fintech regulations such as DORA, MiCA, CSSF, and GDPR.
• Proven experience in IT risk management, third‑party risk, and access governance.
• Ability to translate regulatory requirements into practical IT controls.
• Excellent communication skills to interact with technical teams, auditors, and regulators.

Required skills