ICT Risk & Governance Officer (m/f)

ICT Risk & Governance Officer F/M Reference: LU879256 Luxembourg Permanent Financial Services We are currently working for a leading international professional services firm providing legal, governance, and corporate services to the financial services industry. The Luxembourg office advises investment funds, private equity firms, asset managers, financial institutions, multinational corporations, family offices, and high-net-worth individuals on complex cross-border transactions and regulatory matters.In the context of a newly created position, we are looking for a ICT Risk & Governance Officer F/M. This candidate will be responsible for the implementation and oversight of the Company's outsourcing framework in accordance with CSSF Circular 22/806, and provides IT support in Luxembourg. The manager of this role will be the Managing Director of the Luxembourg Office. The role is responsible for ensuring that all outsourcing arrangements, including ICT services provided by the Group Head Office, are effectively governed, monitored, and properly documented. In addition, the role provides local IT support to Company users, acting as the first point of contact for IT-related incidents and requests. Key Responsibilities1. Outsourcing Governance• Support the deployment and continuous enhancement of the Company's outsourcing governance framework.• Ensure outsourced activities remain aligned with applicable regulations, internal standards and governance requirements.• Oversee the maintenance and accuracy of the outsourcing inventory.• Manage and maintain outsourcing-related records, contractual agreements and service documentation.• Liaise with key internal and external stakeholders involved in outsourcing activities.2. Risk Assessment & Supplier Due Diligence• Facilitate initial and ongoing risk evaluations of outsourced functions and services.• Conduct or coordinate due diligence reviews on external providers and intra-group entities.• Ensure outsourcing-related risks are appropriately identified, evaluated and documented within the Company's risk management framework.3. ICT Vendor Oversight• Oversee ICT outsourcing arrangements, including services delivered by the Group Head Office.• Monitor service quality through the review of performance reports, KPIs and Service Level Agreements (SLAs).• Verify that service providers comply with contractual obligations and operational expectations.• Collaborate with Group IT teams to address performance, service delivery and operational matters.4. Service Monitoring & Management Reporting• Gather and assess operational and performance data from outsourced service providers and intra-group entities.• Track adherence to agreed service levels and performance metrics.• Produce regular management reports on outsourcing activities and provider performance.• Escalate significant incidents, service disruptions or SLA breaches to the designated outsourcing manager.5. Incident Management & Remediation• Identify and monitor issues affecting outsourced services.• Coordinate corrective actions with service providers and relevant stakeholders.• Maintain accurate records of incidents, remediation plans and follow-up activities.6. IT Support & Local Coordination• Serve as the primary contact for end users requiring IT assistance via phone, email or ticketing platforms.• Coordinate with internal and Group IT teams to ensure timely issue resolution and effective user support.If this opportunity matches your skills and experience, please do not hesitate to apply. Your application will be handled with the utmost confidentiality by Quentin de Lacoste Lareymondie.Your profile • Master's degree in Information Technology, Computer Science, Information Systems, or related field.• Solid experience (4+ years) in information security / ICT risk within financial services, preferably within a Luxembourg PSF, bank, management company, or similar regulated entity.• Good knowledge of CSSF circular 22/806 and security frameworks (ISO 27001 or similar) and leading practices.• Solid knowledge of Windows environments and user support.• Strong organizational and time-management skills, effective stakeholder engagement, and a proactive, autonomous, hands-on working attitude.• Ability to interact and work with senior management and service providers / intragroup companies in a collaborative, clear, pragmatic and risk-based manner.• Strong written communication skills for clear controls documentation and executive risk reporting, proficient in Microsoft Office (Excel, PowerPoint), fluent in French and English.