IT GRC Specialist

Join our IT team and contribute to strengthening how technology risks, governance and compliance are managed across the firm. You will work closely with IT and business teams, management, control functions and auditors to maintain a robust IT control environment and respond to evolving regulatory expectations.

As a Manager in IT Governance, Risk & Compliance, you will take ownership of key GRC activities and help ensure our IT environment operates in line with internal standards, regulatory requirements and recognised industry practices. You will connect regulatory expectations, technology risks and business priorities, translating them into practical controls and measurable improvements.

• →Lead and strengthen IT governance frameworks, policies, processes and procedures, ensuring alignment with organisational objectives, regulatory requirements and recognised industry practices.
• →Lead IT risk assessments across systems, infrastructure and operations, identifying vulnerabilities and defining appropriate risk treatment and mitigation strategies.
• →Monitor IT risks, compliance controls and key risk indicators, turning findings and deviations into clear recommendations and actionable priorities for management.
• →Coordinate internal and external IT audits, providing structure and oversight to audit activities and ensuring findings and remediation actions are effectively managed through to completion.
• →Partner with IT and business teams to strengthen controls, implement corrective actions and continuously improve the organisation’s IT risk and compliance environment.
• →Provide clear risk and compliance reporting to management and stakeholders, enabling informed decisions on technology risk, priorities and remediation.
• →Monitor relevant regulatory, technology and threat developments and translate them into practical guidance, improvements and awareness across the organisation.
  

Deepen your expertise across IT governance, technology risk, regulatory compliance and audit while taking ownership of increasingly complex and cross-functional topics. You will broaden your exposure to senior stakeholders and contribute to shaping how IT governance and risk management practices evolve across the organisation.

• A Bachelor’s degree in IT or an equivalent field, combined with 3–5 years of relevant experience in IT GRC, IT security or a related area, including experience supporting GRC initiatives, audits and compliance programmes.
• IT risk and compliance: Advanced / leads and advises – able to lead risk assessments, evaluate vulnerabilities and controls, and define appropriate risk treatment and mitigation strategies.
• IT governance and regulatory frameworks: Proficient / independent use – practical knowledge of requirements and frameworks such as GDPR, DORA, CSSF Circulars, COBIT and ITIL, with the ability to translate them into effective governance and compliance measures.
• IT controls and audit: Advanced / leads and advises – able to coordinate internal and external audits, assess control effectiveness, manage findings and drive remediation within complex IT environments.
• French and English: fluent professional proficiency, CEFR C1 in both languages.

• You structure complex information and lead problem-solving on challenging risk and compliance matters, turning analysis into clear and practical actions.
• You apply independent judgement to complex issues, anticipate potential risks and challenge assumptions constructively while helping others strengthen their decision-making.
• You build effective collaboration across technical and business teams, create clarity around shared objectives and address tensions constructively.
• You act with integrity, handle confidential information with care, and uphold high ethical standards in every situation.

• ISO/IEC 27001 Lead Implementer or Lead Auditor, CRISC, CISSP, CISM or CISA certification.
• COBIT 2019 or ITIL Foundation certification.

The skills listed reflect what matters most to succeed in this role. If your experience aligns with them, even if your path looks different, we encourage you to apply and start the conversation with us.

Bring your expertise to the intersection of technology, risk and regulation. Help strengthen how we anticipate IT risks, respond to evolving requirements and build trusted, sustainable governance practices across the firm, working alongside teams committed to quality and continuous improvement. Grow here. Go further.