Senior Risk Officer

ONELIFE; Menningen; Hybrid; EUR 70.000 - 90.000; Vollzeit

Zusammenfassung

A Luxembourg life insurance company is seeking a Senior Risk Officer to manage ICT risk and internal controls. Candidates should hold a Master's degree and have 5-7 years of related experience, alongside strong communication skills in French and English. The role offers a competitive salary and benefits package, including flextime, teleworking, and 35.5 vacation days.

Leistungen

13th month salary

Lunch vouchers: EUR 13

Pension plan

35.5 days of holidays

Employee development opportunities

Qualifikationen

• 5-7 years of experience in Risk Management focused on ICT risk.
• Solid knowledge of DORA, Solvency II, and GDPR regulations.
• Strong verbal and written communication skills in French and English.

Aufgaben

• Maintain and improve the ICT Risk Management Framework.
• Conduct ICT risk assessments and maintain risk mapping.
• Lead risk analyses related to IT projects.

Kenntnisse

ICT risk management

Internal control

Risk assessment

Communication

Autonomy

Ausbildung

Master’s degree in Risk Management, IT, or related field

Tools

ISO 27001

ISO 27002

Jobbeschreibung

Overview

Senior Risk Officer – ICT Risk & Internal Control Specialist

Permanent contract (CDI)

This opportunity could change your life!

The Mission

OneLife is a Luxembourg life insurance company specialised in cross-border financial planning solutions for wealthy clients across Europe and beyond. To support our growth, we are looking for the right candidate to join our passionate Risk Management Department.

The open position, Senior Risk Officer (ICT Risk & Internal Control Specialist), contributes to a broad range of activities under the responsibility of the Risk Management Department, with a dual focus on ICT risk and Internal Control matters, each representing a core area of responsibility.

In this capacity, the Senior Risk Officer plays a key role in ensuring the effective identification, assessment, monitoring, and reporting of ICT risks, supporting the organisation’s operational resilience and compliance with relevant regulatory frameworks, including, but not limited to, Solvency II, DORA, and GDPR. The role actively contributes to the enhancement of the ICT risk management framework and ensures ICT risks are appropriately embedded in the overall risk management strategy. Working in close cooperation with the IT Department and various Departments, the Senior Risk Officer helps ensure a coherent and consistent approach to ICT risk across the organisation.

The role also supports the design and oversight of the internal control system, extending beyond ICT-related aspects, and contributes to the risk reporting process to senior management, governing bodies, and the Group. Beyond these areas of focus, the Senior Risk Officer is also involved in other initiatives and risk assessments within the remit of the Risk Management function, in line with the team’s responsibilities and evolving priorities.

Main objectives of the role

• Maintain and continuously improve the ICT Risk Management Framework, ensuring alignment with regulatory requirements and industry best practices.
• Act as a driving force in strengthening the company’s Internal Control framework and promoting a strong Internal Control culture across all business areas.
• Conduct ICT risk assessments, maintain the ICT risk mapping, and support integration of ICT risk into the overall risk landscape.
• Lead risk analyses related to IT projects, infrastructure changes, and critical applications; coordinate mitigation plans with IT, IT Security, and other operational teams.
• Monitor the effectiveness of first-level controls (ICT and non-ICT), provide expert guidance on risk mitigation and control improvements.
• Perform second-level controls as defined in the Control Plan, including on non-ICT areas, and support the enhancement of first level controls across all departments.
• Contribute to the management of ICT incidents by supporting root cause analysis, lessons-learned reviews, and follow-up on corrective and preventive actions.
• Ensure appropriate ICT risk governance is in place, contribute to relevant committees, prepare risk reporting, and escalate key risks to senior management and governance bodies.
• Monitor emerging ICT threats, regulatory changes, and market developments to strengthen the ICT risk management approach and ensure timely adaptation of the framework.
• Act as a key contact for business units on ICT risk matters, ensuring ICT risk considerations are embedded in key processes, projects, and change management initiatives.
• Support ICT risk awareness initiatives and contribute to training and communication activities.
• Support the oversight of key service providers (ICT and non ICT) to ensure resilience and risk management expectations are met.
• Actively contribute to the day-to-day activities of the Risk Management function, promoting a strong risk culture and continuous improvement across the organisation.

Profile of our future teammate

• Master’s degree in Risk Management, Information Technology, Information Security, or a related field.
• Minimum 5 / 7 years of relevant experience in Risk Management, preferably with a strong focus on ICT risk and internal control in a regulated financial services environment (insurance or banking).
• Solid knowledge of ICT risk and operational risk management frameworks, practices, and tools, as well as relevant regulations (e.g. DORA, Solvency II, GDPR) and standards (e.g. ISO 27001, ISO 27002).
• Proven experience in designing, executing, and reviewing first- and second-level controls across various operational areas.
• Ability to conduct structured risk assessments, analyze incidents, and propose effective and pragmatic mitigation measures.
• Strong verbal and written communication skills; able to communicate risk-related matters clearly to both technical and non-technical audiences.
• Proactive, with the ability to manage priorities autonomously while contributing to collective team objectives.
• Ability to work effectively with cross-functional teams and to provide them with advice and guidance.
• Fluency in French and English required; other languages considered an asset.
• Professional certification in Risk Management, Internal Control, or Information Security considered an asset.

Are you interested in working for a growing Luxembourg based life insurance company?

Jump into the adventure and join a team with a supportive and collaborative working environment. We encourage all applications and would be pleased to welcome you for an interview.

Recruitment Process

Interested candidates should submit their application, only your CV via Moovijob.com.

OneLife Several reasons

OneLife exists to overturn conventional attitudes to life assurance. As a specialist in this area with close to 35 years’ experience, we develop cross-border financial planning solutions for wealthy clients across Europe and beyond.

Whether it’s a question of long-term savings, inheritance planning or simply understanding how to better manage your wealth, we are dedicated to providing sophisticated, compliant and innovative solutions that are crafted to suit each individual and their evolving needs.

Together with a solid network of select partners — including private banks, family offices and independent financial advisers — our dynamic team of international experts offers a fresh approach that helps understand and anticipate the needs of wealthy clients in a world of change.

With more than EUR 10.5 bn in assets under management, OneLife is a member of Groupe APICIL, the third largest social protection group in France, engaged in health and life insurance, pensions, savings products and related financial services.

What we offer…

• Member of the Insurance collective agreement
• 13th month
• Lunch vouchers : EUR 13
• Pension plan
• Flextime hours & teleworking authorised (possibility to exceed the authorised tax threshold within the limit of 25% of the working time)
• 35.5 days of holidays per year
• Employee development opportunities
• Fruit at the office, sports committee, social events…
• Inclusive company