IT Security Expert – Data Security & DLP

About the role

The IT Security Expert – Data Security & DLP will define and implement data‑security measures across the Banque centrale du Luxembourg’s IT environment. Working within the operational security team, the specialist will support the Cyber Resilience Programme and act as the primary contact for Data Leak Prevention initiatives.

Key responsibilities

• Define RFP requirements and collaborate with vendors to implement and configure selected data‑security solutions.
• Operate and maintain IT security platforms related to data security and access management.
• Work with system owners and IT departments to define, document and enforce data‑security requirements, ensuring successful delivery.
• Develop and maintain technical processes, procedures, tools and documentation to embed security practices into daily IT operations.

Required profile

• Master’s degree in IT technologies, preferably with a specialization in IT security.
• Strong knowledge of the document and data‑management lifecycle, including classification, tagging, labeling, inspection techniques, regex, fingerprinting and machine‑learning classifiers.
• Proven experience designing, implementing and operating Data Leak Prevention (DLP) solutions for on‑premise and SaaS environments, as well as cryptographic protections such as Digital Rights Management.
• Solid understanding of data‑security threats using a risk‑based approach.
• Good knowledge of operating systems, network protocols and security tools.
• Excellent communication skills in English and French and a collaborative, proactive attitude.
• Relevant IT‑security certifications; experience with cloud security, AI security or data analytics is a plus.

Required skills

• Data Leak Prevention (DLP)
• SaaS security
• Digital Rights Management (DRM)
• Document classification, tagging, labeling, regex, fingerprinting, ML auto‑classifiers
• Operating systems and network protocols
• Security tools and technologies
• Document Management Systems
• Privileged Access Management (PAM)
• Identity and Access Management (IAM)
• Cloud security
• AI security and data analytics