GRC Officer

GRC Officer (M/F/X) WESTPOLE Luxembourg S.
A. WESTPOLE Benelux, part of the Prodware Group, is a leading European digital transformation and IT services provider. Through its expertise in Cloud, Cybersecurity, Infrastructure, Digital Workplace, Data and Managed Services, the company supports organizations in designing, implementing, securing and managing their digital environments. Prodware is an international group specialized in digital transformation, business applications and managed services, operating across multiple European countries and serving thousands of clients. As part of this group, WESTPOLE combines local expertise with the strength, innovation capabilities and international reach of a major European technology player. In Luxembourg, WESTPOLE Luxembourg S.
A. is a Support PSF (Professional of the Financial Sector) operating in a regulated environment under the supervision of the CSSF. The company delivers technology and operational services to clients across various industries while ensuring compliance with regulatory requirements, information security standards, governance principles and risk management best practices. As part of its continued growth and commitment to operational excellence, WESTPOLE is strengthening its Governance, Risk & Compliance function to support the organization's regulatory, compliance and risk management objectives. Position Overview Reporting to the Compliance Manager, and maintaining a functional relationship with the Authorized Management and the Board of Directors, the GRC Officer contributes to the development, implementation, maintenance and continuous improvement of governance, risk management, compliance, information security and internal control frameworks across the organization. The role supports the company in meeting its regulatory obligations, mitigating risks, strengthening internal controls and promoting a culture of compliance and continuous improvement.

Key Responsibilities
Compliance & Regulatory Management
• Monitor regulatory developments and assess their impact on the organization.
• Maintain the regulatory register and monitor compliance obligations.
• Contribute to compliance with applicable regulations and standards, including PSF, DORA, NIS2, GDPR and other relevant legal and regulatory requirements.
• Assist in drafting, reviewing and updating policies, procedures and internal controls.
• Support regulatory inspections, audits, client requests and compliance reviews.
• Monitor remediation plans and corrective actions. Operational Compliance
• Support daily compliance activities related to Luxembourg regulatory obligations.
• Perform operational compliance controls.
• Coordinate and monitor KYC (Know Your Customer) and KYS (Know Your Supplier) activities, including periodic reviews.
• Contribute to the AML/CFT framework and controls relating to international financial sanctions.
• Monitor compliance incidents and related corrective actions.
• Work with commercial, operational and administrative teams to ensure compliance with regulatory requirements. Information Security & ISO 27001
• Support the maintenance and continuous improvement of the Information Security Management System (ISMS).
• Participate in information security risk assessments and monitor risk treatment plans.
• Contribute to the maintenance of information security policies, procedures and standards.
• Coordinate activities related to ISO 27001 audits.
• Monitor security incidents, audit findings and corrective actions.
• Support information security objectives and performance reporting. Quality & Continuous Improvement
• Support the maintenance and continuous improvement of the Quality Management System.
• Assist process owners in documenting and improving their activities.
• Define and monitor quality and information security KPIs.
• Contribute to management reviews and continuous improvement initiatives.
• Participate in internal and external audits and monitor related action plans. Internal Control & Risk Management
• Support the development and enhancement of the internal control framework.
• Participate in control reviews and assess the effectiveness of controls.
• Identify and assess operational, regulatory and organizational risks.
• Maintain risk registers and monitor mitigation and remediation plans.
• Contribute to governance, risk and compliance reporting and management dashboards.
• Participate in control self-assessments and internal audit activities. Advisory & Client Support
• Contribute to advisory and compliance support assignments for clients in the areas of governance, risk, compliance, quality and information security.
• Support clients with regulatory compliance and continuous improvement initiatives.
• Prepare reports, recommendations and contribute to client workshops and awareness sessions Reporting Lines / Direct Reporting
• Compliance Manager Functional Relationships
• Authorized Management
• Board of Directors
• Department Managers
• Internal and External Auditors
• Regulatory Authorities (when required) Governance The position reports directly to the Compliance Manager and maintains direct access to the Authorized Management and the Board of Directors for matters relating to governance, risk management and compliance, in accordance with applicable regulatory requirements for Support PSFs. Profile & Qualifications Education
• Bachelor's or Master's degree in Law, Compliance, Risk Management, Business Administration, Information Security, Audit or a related field. Experience
• 2 to 5 years of experience in Governance, Risk & Compliance, Internal Control, Audit, Information Security or Regulatory Compliance.
• Previous experience within a regulated environment is considered an asset.
• Experience in a Support PSF environment is a strong advantage. Technical Knowledge
• Good understanding of CSSF requirements applicable to Support PSFs.
• Knowledge of governance, risk management and internal control frameworks.
• Familiarity with DORA, NIS2, GDPR, AML/KYC requirements and related regulations.
• Understanding information security principles and risk assessment methodologies.
• Proficiency in Microsoft Office tools and reporting practices. Soft Skills
• Strong analytical and problem-solving abilities.
• Excellent written and verbal communication skills.
• Ability to work independently and manage multiple priorities.
• Strong organizational and stakeholder management skills.
• High level of integrity, professionalism and discretion.
• Proactive mindset with a continuous improvement approach.
• Attention to detail and commitment to quality. Why Join WESTPOLE?
• Join a growing international technology group operating in a regulated environment.
• Work closely with senior management and governance bodies.
• Develop expertise in Governance, Risk & Compliance within a Support PSF framework.
• Contribute directly to the company's regulatory compliance, risk management and security objectives.
• Collaborate in a dynamic, multicultural and innovation-driven environment.