ICT Risk Analyst – Micro/Macro Supervision

About the role

Join a specialised supervisory team responsible for analysing ICT risk management measures in the financial sector. You will evaluate applications for authorisation of new financial entities and monitor existing entities, contributing to EU‑wide oversight of critical IT third‑party providers under the DORA regulation.

Key responsibilities

• Analyse ICT organisation and risk‑management sections of authorisation files for future financial professionals.
• Review notifications on the use of ICT third‑party service providers for supervised entities.
• Provide expertise to other supervisory departments on DORA compliance, IT strategy, digital transformation and audit findings.
• Conduct technological and regulatory watch on emerging digital solutions.
• Participate in transversal analyses, national and international working groups, and joint examinations of critical IT service providers.

Required profile

• University degree (minimum BAC+3) in information systems audit, IT security (finance focus), economics, finance or business management with an ICT specialization.
• At least 3 years of professional experience in information systems auditing or ICT risk management.
• Fluent written and spoken English; French and/or German preferred; Luxembourgish a plus.
• Willingness to travel abroad for business missions.

Required skills

• ICT risk management and governance.
• Oversight of ICT third‑party service providers.
• Knowledge of DORA, PSD2, eIDAS, NIS, MICA regulations.
• Familiarity with digital technologies such as DLT, AI, crypto assets and open banking.
• Certifications such as CISA, CISM or CISSP are an asset.

What we offer

• Employment as a public servant with opportunities for professional development in a leading financial regulator.