Senior Consultant - IT Security Officer

Adservio Luxembourg
Adservio Luxembourg is the Luxembourg arm of Adservio Group, 300+ consultants across Paris, Brussels and Luxembourg, 15 years serving regulated industries. We opened in Luxembourg in 2022 and work across financial services, energy and utilities, transport and mobility, insurance and the public sector: wherever compliance is not optional and failure is not acceptable. You join our Technologies & Engineering team.

The context
With our team, you work for a Luxembourg bank, part of a European banking group, on a group-wide programme against emerging cyber threats, including AI-driven ones. Locally, the bank needs one owner to turn the group plan into results that hold under DORA.

Your mission
As local single point of contact, you turn a group-wide plan into controls that the bank’s teams keep owning after you.

Plan and steer

• Turn the group action plan into a local roadmap: scope, milestones, owners, dependencies
• Report progress, risks and decisions to the group; escalate deviations early

Reduce the risk

• Assess cyber risks, define mitigations and track residual risk against appetite
• Improve controls across identity and access, change and platform security, resilience, vulnerability and attack-surface management, and third-party risk
• Coordinate security reviews, regulatory alignment and remediation with assurance functions and third parties

Embed and support

• Give delivery teams pragmatic guidance; hand over controls with lasting ownership
• Support the IT security team on risk assessments, incidents and audits when needed

Your profile
You turn complex security needs into clear, actionable plans, for engineers and risk committees alike.

What is essential

• At least 5 years in IT security, IT risk or security governance, including local delivery ownership in a cross-functional, group-led project
• Strong knowledge of ISO 27001, NIST CSF, OWASP, PCI DSS and DORA
• Core security technologies: firewalls, proxies, DLP, antivirus, PAM, WAF and SIEM
• Agile delivery and DevSecOps; ServiceNow and Microsoft Office
• A Master’s degree in IT security, computer science or risk management, or equivalent experience

What makes the difference

• Banking experience
• Git, Azure Pipelines or scripting, and familiarity with Azure-based environments
• A security or project-management certification

Languages
A good command of English and conversational proficiency in French are required

What you’ll find with us
A tribe of senior peers. You join our infrastructure and cybersecurity tribe: peer reviews and shared threat watch.
Expertise as a recognised status. Our Subject Matter Experts are named as such and called on across the group.
Regulated environments, across sectors. This assignment is in banking; our work also spans energy, transport, insurance and the public sector. You will not stay a single-sector consultant.
A practice still being built, with a clear path. Opened in 2022 and backed by a group of 300+ consultants, our Luxembourg office is taking shape now. Our grade framework includes an expert track for those who choose depth over management.

How we hire
Application → Conversation with HR → Technical interview with your future peers → Feedback and decision.
Whatever the outcome, you will hear back from us.