Grand Duchy of Luxembourg
Information Security Manager

Information Security Manager

Grant Thornton Advisory is currently looking for an Information Security Manager (m/f).Working at Grant Thornton Advisory is an efficient opportunity to develop your potential within human-sized team in the heart of a multicultural and international growing group while respecting your work / life balance. 

Information Security Manager

Main responsibilities

Within the Information Security advisory team, the Information Security Manager will have a customer facing advisory role. She/he will oversee the functioning of customer’s information security measures, plans, designs, and implement it to incorporate the information security controls that are designed to meet the organization's objective and mission.

he/she will provide continuous support to the newly appointed team members and train them. He/she will delegate and assign the work to the other members and review their work to ensure quality and relevance. He/she will supervise the team and may be involved in the hiring and training procedures. He/she will keep a track on the operational budget and make sure that the work is performed as per the assigned budget.

To obtain a better idea, mentioned below are a few points that illustrate the key responsibilities that the Information Security Manager shall be able to handle in any organization:

• Assess, enhance and align the Information Security Management System of customers including policies, processes, practices, roles and responsibilities.

• Propose and implement a realistic approach of a security strategy that could lead to a certification schedule and process.

• Ensure that all the relevant policies and procedures related to information security are adequate.

• Develop, update, maintain, and implement Information Security strategy and plans.

• Define and deploy information security awareness programs.

• Define and implement an ICT/IS risk management framework.

• Developing security reports and dashboards.

• Ensure continued compliance with all the current laws, regulations, directives and contractual requirements.

Main requirements

The ideal Information Security Manager candidate shall be able to explain complex ideas in a concise manner, and have good judgmental and decision-making skills, excellent analytical and interpretation skills, and excellent communication skills and good presentation skills. The ideal Information Security Manager candidate shall also have:

• Excellent level of French and English;

• Master’s degree in Information Security or Computer Science;

• A least five years’ experience in similar role;

• Demonstrated ability to understand legal, technical and governance topics, including these issued by the CSSF and the EBA;

• Experience completing multiple projects simultaneously on time and with minimal direct supervision;

• Experience in Information Security Risk Management;

• Experience in or with information security references like ISO2700x norms;

• Experience in Financial sector regulations at European or local level is a plus;

• Hold IS certifications such as CISSP, CISM, ISO27001 Lead Implementer is a plus.

Additional Information

Grant Thornton is a collaborative, entrepreneurial firm on the move! As part of a dynamic, global organization of more than 62,000 people serving clients in more than 130 countries, we have the agility and focus it takes to be a leader.

Here in Luxembourg, 280 professional staff and 26 partners are offering high-quality assurance, tax and advisory services to clients that range from private individuals to corporations, banks and public institutions.

How to apply

Please send your CV with the reference Information Security Manager (m/f) by email at talents@lu.gt.com.

All applications will be treated as strictly confidential.

All personal data that will be collected from candidates as part of the recruitment process, will be processed in compliance with the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679), (Enforcement date: 25 May 2018). This among others means that they will only be processed based on one of the possible legal basis (as per Art. 6 of the GDPR), be it with the candidates’ consent or on the basis of an employment contract. This also means that personal data will not be retained for more than required by the GDPR or by applicable Luxembourg laws i.e. beyond completion of the recruitment process.

For more information, we encourage you to read our Privacy Notice at www.grantthornton.lu. If you have any questions, please contact us at gdpr(at)lu.gt.com