IT Security Officer (ISO) – Information Security

About the role

KPMG Luxembourg is looking for an IT Security Officer to lead and enhance its Information Security Management System (ISMS). The role acts as the second line of defence, collaborating with internal IT teams and representing the National IT Security Officer for KPMG Services.

Key responsibilities

• Manage and continuously improve the ISMS.
• Develop, implement and maintain security policies, standards, procedures and controls.
• Conduct security risk assessments, vulnerability analyses and oversee security requirements in change management, supplier relationships and asset management.
• Monitor security events, manage incidents and investigations, and address policy non‑conformities.
• Ensure compliance with relevant regulations, standards and internal requirements.
• Lead IT security projects, certifications and audits (e.g., ISO, PSDC).
• Produce security reports, KPIs, metrics and vendor risk assessments.
• Advise internal teams, management, clients and authorities on security matters.
• Promote security awareness through training and communication initiatives.
• Collaborate with business units to embed security controls into processes and projects.
• Monitor emerging cyber threats and industry best practices, proposing improvements.

Required profile

• Bachelor's or Master's degree in IT, Information Security or a related field.
• Strong analytical mindset with meticulous attention to detail.
• Ability to think strategically while handling technical security challenges.

Required skills

• Information Security Management System (ISMS) implementation.
• ISO 27001 or related security standards.
• Security risk assessment and vulnerability analysis.
• Security incident management.
• Audit and certification processes (e.g., ISO, PSDC).

What we offer

• Career development within a global professional services network.
• Comprehensive benefits supporting autonomy, flexibility and responsibility.
• Opportunities to work on diverse, high‑impact security projects.