Information Security Expert

Job Title:Information Security Expert

Location: Luxembourg , NONE

Employment Type: 

Permanent

Job Description

As an Information Security Manager, you will play a critical role in safeguarding our organization's information systems by developing, managing, and maintaining the Information Security Management System (ISMS). You will ensure that all security documents are harmonized and updated to comply with security policies, standards, and regulatory requirements. Your expertise will be pivotal in conducting security risk assessments, managing security requests, and providing regular reporting on our security posture to senior management and relevant authorities.

Key Responsibilities

• Document Management: Develop and manage documents related to the Information Security Management System. Harmonize and update security documents to maintain consistency across the organization and ensure compliance with security policies, standards, and regulatory requirements.

• Risk Management: Contribute to the risk management process by conducting security risk assessments to identify vulnerabilities in projects and initiatives. Recommend, follow up on, and control the implementation of mitigation measures.

• Compliance and Audits: Coordinate with internal and external stakeholders to ensure that penetration tests, audit remediation steps, and other security measures are reviewed and completed in a timely manner.

• Data Classification: Maintain and implement a framework for data classification to ensure accurate documentation and classification of all data. Collaborate with relevant parties to identify data ownership.

• Reporting: Provide regular reporting on security operations, risk posture, and compliance status to the Chief Information Security Officer (CISO), senior management, and relevant authorities (e.g., NIS, ENTSO-E, ENISA, CNPD).

• Incident Response: Manage day-to-day security requests, including incident response reports, analysis, follow-up, and security tests such as penetration tests and configuration reviews.

• Security Testing Program: Develop and maintain the Security Testing Program for the Group or dedicated entity, ensuring its proper execution.

• Training and Awareness: Support the development and delivery of information security training and awareness programs across the Group.

• Identity & Access Management: Support the definition of roles and access permissions to ensure secure access to information systems. Monitor identity and access management systems and ensure the effective implementation of the Identity & Access Management Policy.

Your Profile

• Strong analytical and synthesis skills.
• Ability to manage priorities effectively.
• Proactive, dynamic, and results-oriented.
• Keen attention to detail with a strong sense of discretion and confidentiality.
• Highly effective verbal and written communication skills in English and French. German is a plus.

What We Offer:

Impactful Work: Join a Group that is actively shaping Luxembourg’s energy transition.

Competitive Compensation: Benefit from a competitive salary with additional perks.
Career Growth: Enjoy significant stability of employment and opportunities for growth within the Group.

Apply now to be part of a dynamic team that is building the future of Luxembourg’s energy transition!

 

#LI-WA1