Senior GRC Program Manager

📋 Description

• Ensure EU/Luxembourg security frameworks (DORA) and related standards are implemented and maintained.
• Manage outsourced ICT and security services to meet regulatory standards and SLAs.
• Coordinate with global Engineering/IT teams to ensure changes are resilient and compliant.
• Implement security controls across infra and apps aligned with internal/regulatory guidelines (EBA/ESMA/CSSF).
• Localize and maintain InfoSec policies, standards, and procedures for EU compliance with global teams.
• Provide technical evidence and support audits/regulatory exams with system knowledge.

🎯 Requirements

• 5+ years in information security infrastructure (regulated industry preferred).
• Experience in Luxembourg financial/tech sector with regulatory landscape.
• Knowledge of DORA: resilience testing, third-party management, incident response.
• Familiar with EU frameworks: MiCA, EBA, ESMA standards.
• Proficient in ISO 27001, SOC2, NIST; able to gather evidence from cloud-native systems.
• Cross-functional work; Jira/Confluence/JupiterOne/AWS; CISSP/CISA.

🎁 Benefits

• Competitive salary, bonuses, and equity.
• Benefits covering healthcare, retirement, family support.
• Employee giving match.
• Mobile phone stipend.
• Generous vacation policy.
• Parental leave and family planning benefits.