Digital Risk Oversight Expert

About the role

The Digital Risk Oversight Expert will ensure that KPMG Luxembourg’s digital security risks are identified, monitored and managed. Working independently, you will provide oversight, governance and advisory support to the first line of defense, helping to align solutions, processes and behaviours with internal policies and industry best practices.

Key responsibilities

• Conduct independent reviews of security controls and deliver actionable improvement recommendations.
• Assess and validate the adequacy of security measures implemented by the first line of defense.
• Design, implement and monitor security‑related processes to ensure compliance with standards.
• Lead investigations of security incidents, manage containment, mitigation and reporting, and ensure root‑cause analysis and lessons learned are applied.
• Produce regular reports on information‑security status, KPIs and KRIs for senior management.
• Identify, evaluate and prioritize remediation of critical vulnerabilities based on business impact.
• Develop and deliver training sessions to strengthen the organization’s security culture.
• Collaborate with the first line of defense, third‑party vendors, auditors and regulators on security matters.

Required profile

• Bachelor’s or Master’s degree in IT, preferably with a focus on Information Security.
• Minimum 8 years of experience with information‑security concepts and practices.
• Strong knowledge of IT security standards such as ITIL, ISO 27001 and OWASP.
• Proficiency with security tools including firewalls, endpoint detection and response (EDR) and intrusion‑prevention systems (IPS).

Required skills

• ITIL
• ISO 27001
• OWASP
• Firewall technologies
• EDR solutions
• IPS/NIPS

What we offer

• Excellent career prospects with autonomy, flexibility and responsibility.
• Comprehensive benefits designed to support wellbeing and professional growth.