ICT Risk Management Consultant/Senior Consultant

at  Reply

QUALIFICATIONS

• At least 3 years Risk Management experience in Information Technology
• A minimum of a Master’s degree in computer science, ICT risk management or any related field
• Proficient in ICT risk assessment methodologies and tools
• Hands-on incident management experience
• Sound knowledge of ICT related and local regulations (e.g. CSSF and CAA regulations, GDPR, DORA, etc.) and ICT standards (ISO27001, ISO31000, etc.)
• Relevant certifications as CISA, CISM, CGEIT, BRMP, CISSP, COBIT are a strong asset,
• Fluency in written and spoken English and French, any additional language is a plus
• Strong problem solving, analytical skills, with excellent communication and organisation skills

• Identifying and assessing potential ICT risks, designing and implementing strategies and frameworks to properly manage them
• Conducting ICT risk and control management gap assessment based on regulations and/or industry standards, defining remediation actions and implementation plan
• Providing guidance on security frameworks (e.g., ISO 27001) and best practices
• Designing Information Security plans, IT internal audit plans, Cyber Awareness program, ICT Incident management plan
• Designing and implementing policies, processes and procedures
• Defining and implementing controls to mitigate risks and meet regulatory requirements
• Performing diagnostics and testing of internal controls
• Stay abreast of emerging threats, industry trends and new regulations
• Leading and coaching teams on-the-job to ensure successful mission outcomes and high quality deliverables