Information Security Officer

TheHappyRecruiter (THR) is supporting a well-established organization in Luxembourg in the recruitment of an experienced Information Security professional to strengthen its cyber resilience, governance, and operational security framework.

This role sits at the heart of the security function, acting as a key interface between IT, business teams, and external stakeholders, ensuring that security is embedded across all layers of the information system. In this position you will report to the CISO already in place

Key Responsibilities:

You will act as a central pillar of the security posture, with a focus on both governance and operational execution:

• Ensure the deployment, enforcement, and continuous improvement of security policies across the IT landscape
• Perform recurring security assessments including access governance, system configuration reviews, and compliance checks
• Coordinate vulnerability management activities including penetration testing, security scanning, tracking findings, and remediation follow-up
• Collaborate closely with SOC teams to monitor, analyse, and respond to security events
• Oversee and manage security-related incidents and ticketing workflows from detection to resolution
• Define, track, and report security KPIs to measure maturity, risk exposure, and control effectiveness
• Identify gaps against recognized standards and frameworks such as ISO 2700X, NIST Cybersecurity Framework, and CIS Controls
• Contribute to the design and implementation of secure architectures (authentication, encryption, API security, segmentation, etc.)
• Support IT and business projects with security-by-design principles, including risk assessments and compliance validation
• Coordinate internal, external, and regulatory audits and ensure readiness for frameworks such as GDPR, DORA, and CSSF requirements
• Manage the full lifecycle of digital certificates and secure communications with partners and clients
• Contribute to incident response activities including investigation, communication, and post-mortem analysis
• Maintain a continuous watch on emerging threats, vulnerabilities, and security technologies
• Produce clear reporting and dashboards for senior management and the CISO

Profile Required

• Master’s degree (or equivalent Bac+4/5) in Cybersecurity, Computer Science, or Information Systems
• Minimum 5 years of experience in information security or a similar role
• Strong understanding of security governance frameworks, compliance requirements, and audit environments
• Hands-on knowledge of security tooling such as SIEM, EDR, MFA, IAM/PAM, DLP, and application security tools (e.g. SonarQube, Nexus)
• Ability to operate autonomously, prioritize effectively, and drive initiatives with minimal supervision
• Strong analytical mindset with the ability to bridge technical and business discussions
• Structured, rigorous, and solution-oriented approach to problem solving

This position is handled in strict confidentiality by THR.

Interested candidates can reach out Géraldine Spies directly for a discreet discussion.