Lensys MarketplaceMissions
Lensys
Suivez-nous

IT Compliance Officer

A leading financial institution is seeking an IT and Cyber Control & Compliance Officer to define and maintain a robust Information Security Management System. This role will develop, implement, and monitor controls to mitigate ICT risks and ensure regulatory compliance across the organization.

CONTEXT

Our client, a major player in its sector, is strengthening its Governance, Risk and Compliance (GRC) function to meet the growing demands of IT and cyber regulations. The organization recognizes that effective IT and information security management is not just a technical necessity but a strategic enabler. You will join a team dedicated to defining, implementing, and maintaining an IT and Information Security Management System that protects critical assets and ensures compliance with a complex web of standards and regulations. The environment is highly regulated, with significant scrutiny from regulators, auditors, and customers. Your work will directly contribute to the resilience and trustworthiness of the institution. This is an opportunity to shape the control landscape and embed a culture of security and compliance across the enterprise.

ACTIVITIES

  • Define, implement, and maintain an IT and Information Security Management System (ISMS) aligned with industry standards.
  • Develop, implement, and monitor IT and cyber controls to mitigate ICT risks.
  • Ensure compliance with relevant regulations, standards, and frameworks (e.g., ISO 27001, NIST, DORA, GDPR).
  • Conduct risk assessments and control testing, documenting findings and recommending remediation.
  • Prepare and present compliance reports to management and stakeholders.
  • Collaborate with IT, security, legal, and business teams to embed controls into daily operations.
  • Support audits and regulatory inspections, providing evidence and explanations as needed.

EXPECTED ACHIEVEMENTS

  • A robust, auditable ISMS that meets regulatory and internal requirements.
  • Effective IT and cyber controls that reduce risk and improve resilience.
  • Clear, actionable reporting that enables informed decision-making by management.
  • Successful audit outcomes and minimal findings.
  • Increased security awareness and compliance culture across the organization.
  • Continuous improvement of the GRC framework in response to evolving threats and regulations.

ENVIRONMENT

  • Frameworks: ISO 27001, NIST, DORA, GDPR, COBIT.
  • Tools: GRC platforms, Archer, ServiceNow, Excel, Power BI.
  • Domains: IT governance, risk management, cybersecurity, compliance, audit.
  • Stakeholders: IT teams, security officers, legal, compliance, auditors, regulators.
  • Language: English, with French/Dutch as a strong plus.