IT GRC Specialist

Pwc Luxembourg is hiring an IT Governance, Risk and Compliance (GRC) Specialist M/F/D. What if it was you? 

Be a part of our team where you will:  

• Ensure the IT organization remains compliant with internal standards, regulatory requirements, and industry best practices; 
• Act as a custodian of IT GRC frameworks, ensuring consistency and adherence across the organization;  
• Define, develop, document and maintain IT policies, processes, and procedures to align with organizational objectives and regulatory requirements; 
• Perform IT risk assessments to identify, analyze, and mitigate IT-related risks and vulnerabilities across the systems, infrastructure and operations; 
• Monitor key risk indicators and recommend actionable strategies to address deviations effectively, contributing to enhanced risk posture; 
• Prepare risk and compliance reports for management and stakeholders, offering actionable insights to support informed decision-making; 
• Coordinate and support the execution of internal and external IT audits, tracking audit issues and ensuring timely remediation;
• Collaborate with IT and business teams to implement corrective actions and drive continuous improvement based on audit findings and risk assessments; 
• Develop and deliver training on GRC topics, policies, and procedures to staff, fostering a culture of compliance and awareness throughout the organization; 
• Stay updated on emerging technologies, threats, regulatory changes, and industry trends to proactively address risks and opportunities. 

Let’s talk about you. If you...

• Hold at least bachelor’s degree in IT or equivalent and minimum 3 to 5 years of experience in IT GRC, IT security, or related fields with a proven track record of supporting GRC initiatives, audits, and compliance programs; 
• Show demonstrated experience conducting comprehensive risk assessments, including the identification, evaluation, and mitigation of IT-related risks; 
• Have practical knowledge of compliance management and IT auditing processes, including vulnerability assessments and the development of effective risk treatment plans; 
• Understand relevant regulatory requirements (e.g., GDPR, DORA, CSSF Circulars, etc.) with the ability to ensure organizational adherence to these standards; 
• Have practical experience working with IT governance frameworks such as COBIT, ITIL, and other compliance and risk management frameworks; 
• Possess strong analytical skills to assess complex IT risk and compliance issues, develop solutions, and implement changes effectively; 
• Show proficiency in implementing, monitoring, and maintaining IT governance and compliance controls within complex IT environments; 
• Have exceptional attention to detail, especially when reviewing policies, controls, and risk assessments, ensuring thoroughness and accuracy; 
• Have excellent written and verbal communication skills, with the ability to present complex GRC topics clearly to both technical and non-technical stakeholders; 
• Show proven ability to manage multiple tasks and projects efficiently, meeting deadlines while maintaining high-quality and compliance standards; 
• Have strong interpersonal skills with a team-oriented mindset, fostering collaboration across departments to achieve GRC objectives; 
• Are fluent in English and French, with the ability to work effectively in multicultural and multilingual environments. 

Certification (you have preferably one or more of the following certifications): 

• ISO/IEC 27001 Lead Implementer/Lead Auditor 
• ITIL Foundation 
• COBIT2019 
• CRISC (Certified in Risk and Information Systems Control) 
• CISSP (Certified Information Systems Security Professional) 
• CISM (Certified Information Security Manager) 
• CISA (Certified Information Systems Auditor)